UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMAITON 





March 2013 



WATCHLISTING 
GUIDANCE 




UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMAITON 

WARNING: This record contains Sensitive Security Information that is controlled under 49 CFR 
parts 1 5 and 1 520. No part of this record may be dtscfosed to persons without a "need to 
know", as defined in 49 CFR parts 15 and 1520, except witli tine written permission of the 

Administrator of the Transportation Security Administration or the Secretary of Transportation. 

Unauthorized release may result in civii penalty or other action. For U.S. government agencies, 
public disclosure is governed by 5 U.S.C. 552 and 49 CFR parts 15 and 1520. 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



2013 WATCHLISTING GUIDANCE 
TABLE OF CONTENTS 

CHAPTER 1: WATCHLISTING PROCESS AND PROCEDURES 5 

I INTRODUCTION 5 

II. WATCHLISTING AUTHORITIES 6 

III. CONSTITUTIONALLY PROTECTED ACTIVITIES 10 

IV. WATCHLISTING POLICIES I , 

V. WATCHLISTING STANDARD: IDENTIFYING AND SUBSTANTIVE 
DEROGATORY CRITERIA 12 



VI. 



WATCHLISTING PROCESS OVERVIEW 13 



VII. ROLES AND RESPONSIBILITES FOR THE WATCHLISTING AND SCREENING 
COMMUNITY Ig 

VIII. QUALITY CONTROL MEASURES 1 7 

IX. NOMINATION PROCEDURES 20 

X. PROCEDURES TO REMOVE AN INDIVIDUAL FROM THE WATCHLIST ...27 

XI. REDRESS PROCEDURES 28 

XIL PERIODIC REVIEW OF THE WATCHLISTING GUIDANCE 29 

CHAPTER 2: MINIMUM IDENTIFYING CRITERIA 30 

I. BTOMETRTC NOMINATIONS 3O 

II. MINIMUM BIOGRAPHIC NOMINATION REQUIREMENT 30 

III. MINIMUM BIOGRAPHIC INFORMATION REQUIRED FOR EXCEPTIONS TO THE 

UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 

Page I 1 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 

MINIMUM SUBSTANTIVE DEROGATORY STANDARDS FOR TERRORIST 
WATCHLISTING 32 

CHAPTER 3: MINIMUM SUBSTANTIVE DEROGATORY CRITERIA 33 

I. INTRODUCTION AND PURPOSE 33 

II. REASONABLE SUSPICION 33 

m. KNOWN TERRORISTS 35 

IV. SUSPECTED TERRORISTS 37 

V. EXCEPTIONS TO SUPPORT IMMIGRATION AND VISA SCREENING ACTIVITIES 
BY DIIS AND DOS 42 

VI. SPECIAL CONSIDERATIONS 45 

VII. EXAMPLES OF TERRORISM AND/OR TERRORIST ACTIVITIES 47 



CHAPTER 4: NO FLY, SELECTEE AND EXPANDED SELECTEE LISTS 
IMPLEMENTATION GUIDANCE 50 

I. BACKGROUND 50 

II. PRE-CONDITIONS FOR PLACEMENT ON THE NO FLY OR SELECTEE LIST. 50 

III. NO FLY LIST CRITERIA 51 

IV. FURTHER CLARIFICATION OF NO FLY CRITERIA 51 

V. SELECTEE LIST CRITERIA 54 

VI. EXPANDED SI-LECTEE LIST CRITERIA 54 

VII. ACTIONS BASED UPON POSITIVE MATCHES TO THE NO FLY, SELECTEE, OR 
EXPANDED SELECTEE LISTS 54 

VIII. IMPLEMENTATION GUIDELINES 55 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 
Page I 2 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



IX. SPECIAL SITUATIONS 56 

X. NOMINATIONS THAT ARE INELlGiBLE/NOT SUll ABLE FOR EITHER THE NO 
FLY OR THE SELECTEE LIST 57 



CHAPTER 5: ENCOUNTER MANAGEMENT AND ANALYSIS 58 



I. INTRODUCTION AND PURPOSE 58 

II. PROCESSING TERRORISM INFORMATION FROM ENCOUNTERS WITH 
POSITIVELY IDENTIFIED KNOWN OR SUSPECTED TERRORISTS 59 

III. CATEGORIES OF TERRORISM INFORMA TION FROM ENCOUNTERS WITH 
POSITIVELY IDENTIFIED KNOWN OR SUSPECTED TERRORISTS OF 
POTENTIAL INTEREST 65 

IV. ENCOUN TER MANAGEMENT ACTIONS 69 

V. ROLES AND RESPONSIBILITIES FOR UPDA TING EXISTING KNOWN OR 
SUSPECTED TERRORIST RECORDS AND NOMINATING NEW KNOWN OR 
SUSPECTED TERRORIS TS BASED ON INFORMATION I-ROM POSI TIVE 
ENCOUNTERS 71 

VI. RESPONSIBILITY TO COORDINA'TIv ANY ACTIONS CONTI'MPLATED BASED 
ON INFORMA TION FROM ENCOUNTERS WITH A KNOWN OR SUSPECTED 
TERRORIST 73 

VII. EXAMPLES OF TERRORISM INFORMATION TYPICALLY AVAILABLE FROM 
ENCOUNTERS 74 

VIII. OBTAINING ENCOUNTER INFORMATION THROUGI I TSC'S DAILY 
ENCOUNTER REPORTS 77 



APPENDIX 1: DEFINTTTONS 

APPENDIX 2: HSPD-6 

APPENDIX 3: TSC MOLl 

APPENDIX 4: ADDENDUM B TO TSC MOU 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 

Page I 3 



UNCLASSIF1ED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 

APPENDIX 5: INFORMA 1 ION SHARING MOU 
APPENDIX 6: EXECUTIVE ORDER 13388 

APPENDIX 7: DOJ PROTOCOL ON TERRORIST NOMINA HONS 
APPENDIX 8: REDRESS MOU 

APPENDIX 9: PRESIDENTIAL MEMORANDUM REGARDING 12/25/2009 TERRORIST 
ATTACK 

APPENDIX 10: ACRONYMS AND ABBREVIATIONS 

APPENDIX II: SUMMARY OF CHANGES AND UPDATES FROM THE 2010 
WA rCHLISTING GUIDANCE 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 
Page I 4 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



CHAPTER 1: WATCHLISTING PROCESS AND PROCEDURES 

I. INTRODUCTION 

1.1 A key foundation for tf.rroris r ' -related screening is the U.S. Government's TERRORIST 
watchlisting process managed by the Terrorist Screening Center (TSC). The TSC was 
established by the Attorney General, acting through the Director of the Federal Bureau of 
Investigation (FBI), and in coordination with the Secretary of State, the Secretary of 
Homeland Security, and the then Director of Central Intelligence for the Intelligence 
Community (IC). The 1 SC is supported by the National Counterterrorism Center (NCTC), 
the Department of State (DOS), the Department of Homeland Security (DIIS), the IC, the FBI, 
Law Enforcement Agencies, Regulatory Agencies and Diplomatic Bureaus. The TSC has 
created and maintains the Terrorist Screening Database (TSDB) or Terrorist Watchlist to serve 
as the U.S. Government's consolidated watchlist for terrorism SCREENING information. 

1 .2 The current TERRORIST watchlisting process supports the U.S. Government's efforts to combat 
fERRORlSM by: (1) consolidating the U.S. Government's Terrorist Watchlist in the TSDB; (2) 
helping SCREENERS and intelligence agencies accurately identify individuals on the Terrorist 
Watchlist; (3) providing SCRi;i;ni:rs with information to help them respond appropriately 
during encount1::rs with known or suspected ti;rrorists; and, (4) subsequently collecting 
information about the KNOWN or SUSPECTED ti:rrorist for use in assessing threats and 
conducting investigations.^ The collected information may be incorporated into the Terrorist 
Identities Datamart Environment (TIDE) and TSDB to enhance the records of KNOWN or 
SUSPECTED TERRORISTS and may be made available to the wider watchlisting and screening 
communities. Today, the TSDB also includes information about certain foreign nationals who 
are associated with terrorism, terrorist ACTIVITY, or KNOWN or SUSPECTED terrorist(s) 
but for whom there is insufficient DEROGATORY INFORMATION to be independently 
watchlisted. This may include certain immediate family members of known or suspected 
TERRORISTS, or known associates of known or SUSPECTED TERRORISTS. These additional 
categories of records (also known as exceptions to the REASONABLE SUSPICION standard) are 
maintained to support immigration and screening activities primarily conducted by DOS and 
DHS.^ 



' See Appendix I, Definitions for words or phrases appearing in all capitalized letters throughout this Watchlisting 
Guidance. 

^ A .SCRHI-NI-.R is a Department or Agency that is authorized to conduct TKRRORISM screening to determine if an 
individual is a possible match to a KNOWN or SUSPI-CTCDTL^RRORIST in the l-SDB. The term "SCRI;i-:ni;r" is used 
throughout this document as a general reference to a government official who compares an individual's mformation 
with information in the TSDB to determine if an individual is in the TSDB. Certain .SCREFNI-RS have components 
which perform both screening and law enforcement duties and law enforcement officials who engage in such activities 
may normally describe their targeting or other actions in this context as other than "screening." For ease of reference, 
government officials who compare an individual's information with information in the TSDB will be refen-ed to in the 
Guidance as "SCRi:i:ni;rs." The interna! guidance set forth herein is not intended to create or confer any rights, 
privileges, or benefits in any matter, case, or proceeding. See United States v. Caceres, 440 U.S. 741 . 
^ See Chapter 3, Section V, infra, for more details. Aside from these limited exceptions, references to the TSDB in this 
Watchlisting Guidance denote the TSDB as containing information about KNOWN or SUSPtcrED TERRORIS IS. 
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1 .3 This Watchlisting Guidance has been developed to help standardize the watchlisting 
community's nomination and screening processes. It is important to remember, however, that 
watchlisting is not an exact science. There are inherent limitations in any primarily name- 
based system and analytic judgments may differ regarding whether subjective criteria have 
been met. Given these realities, the U.S. Government's watchlisting process attempts to 
safeguard the American people from a rivRRORlSl attack while safeguarding privacy, civil 
rights and civil liberties. 

1 .4 Thus, when reasonable minds could disagree on a record, a NOMINATOR will make a 
determination in favor of sending the nomination to NCTC for consideration and additional 
review. The TSC has the final decision authority regarding watchlisting determinations and 
will add an individual's name to the TSDB, consistent with TSC Actions and Processes as 
further described in Paragraph 1.56. 

WATCHLISTING AUTHORITIES 

1 .5 On September 1 6, 2003, the President issued I lomeland Security Presidential Directive 6 
(HSPI)-6), which directed the Attorney General to "establish an organization to consolidate 
the U.S. Government's approach to TI'RKORISM scrRENINCJ and provide for the appropriate 
and lawful use of i lrrorist informahon in screening processes." terroris t 
INFORMATION was specifically defined to mean "information about individuals known or 
appropriately suspected to be or have been engaged in conduct constituting, in preparation for, 
in aid of, or related to TERRORISM." HSPD-6 also directed the heads of Executive 
Departments and Agencies to provide to NCTC on an on-going basis, "all appropriate 

l ERRORlST INFORMATION in their possession, custody, or control," to the extent permitted by 
law. 

1 .6 The intent of HSPD-6 was to consolidate all I HRRORISM INFORMATION at the Terrorist Threat 
Integration Center (^ITIC) whose functions were assumed by NC TC^ - in a classified 
database that would then extract Unclassified, For Official Use Only (U//FOUO) TERRORIST 
IDi;n TIFIERS for passage to the new organization created by the Attorney General. Thus, 
concurrent with the issuance of I ISPD-6, the TSC was established via the Memorandum of 
Understanding on the Integration and Use of Screening Information to Protect Against 
Terrorism {TSC MOU), which was signed by the Attorney General, the Secretaries of State 
and Homeland Security, and the Director of Central Intelligence (on behalf of the IC). 



" See Appendix 2, HSPD-6. 
' See FN 8, infra. 

" See Appendix 3, TSC MOU; see also Appendix 4, Addendum B to the TSC MOU. In 2004, the Secretaries of State, 
Treasury, and Defense also became signatories to the Memorandum of Understanding between the Intelligence 
Community, Federal Law Enforcement Agencies, and the Department of Homeland Security Concerning Information 
Sharing, dated March 4, 2003 (.Information Sharing MOU). By doing so, they agreed that all provisions of the TSC 
MOU and the Information Sharing MOU apply to all entities that are or become a part of their respective Departments. 

UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



Page I 6 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



1 .7 Under HSPD-6, consistent with the U.S. Constitution and applicable laws, including those 
protecting the rights of all Americans, the TSC was to develop and maintain an unclassified 
database containing the most thorough, accurate, and current identity information possible^ 
about KNOWN or SUSPECTED TFRRORISTS. The TSC created the TSDB to meet these goals. 
The TSDB is also known as the Terrorist Watchlist. The TSDB receives ti:rrorist 

IDCN ni ll-RS from two sources: NCTC's TIDE provides information concerning KNOWN or 
SUSl>i:CTi;i) international ti:rrorists and the TSC's Terrorist Review and Examinations Unit 
(TREX) provides the identities of KNOWN or SUSPECTED domestic TERRORISTS who have no 
link to international n;RRORlSM. NCTC's TIDE contains identifying and substantive 
DEROGA IORY INFORMATION on KNOWN or SUSPECTED international TI^RRORISTS and the FBI's 
Sentinel system contains supporting information regarding purely domestic l ERRORISTS. 

1 .8 Pursuant to Paragraph (2) of I lSPD-6, the NCTC is mandated to "provide f'l SC] with access 
to all appropriate information or intelligence in the [NCTC's] custody, possession, or control 
that [TSCJ requires to perform its functions." NC I C fulfills this function by providing TSC's 
TSDB with U//FOUO information about KNOWN or SUSPECTED TERRORISTS from NC I C's 
TIDE and by providing access to TIDE Online, a read-only copy of the TIDE database, to 
those in the watchlisting community who require access. 

1.9 NCTC's establishment by the President was codified by section 1021 of the Intelligence 
Reform and Terrorism Prevention Act of 2004 (IRTPA).^ Pursuant to IRTPA, NC TC shall 
"serve as the central and shared knowledge bank on KNOWN and suspkcti:d TERRORISTS and 
international terror groups." In addition, NCTC "may, consistent with applicable law, the 
direction of the President, and guidelines referred to in [the statute], receive intelligence 
pertaining exclusively to domestic counterterrorism from any Federal, State, or local 
government or other .source necessary to fulfill its responsibilities and retain and disseminate 
such intelligence."** 

1.9.1 All Departments and Agencies are required to provide NCTC with all TlvRRORlSM 
INFORMATION. Due to the amount of information involved, only a subset of this 
information is provided in the NCTC prescribed format designed to facilitate direct 
ingestion into the TIDE. NOMINA I ING di:partmi:n rs and agencie.s, however, should 
remain focused on reviewing and watchlisting ri-RRORiSM INFORMATION from datasets 
most likely to contain information about KNOWN or SUSPECTED TERRORISTS. 

Addendum B to the TSC MOU, which superseded Addendum A, incorporates by reference all provisions of the 
Information Sharing MOV. See Appendix 5. • . ■ j 

' The TSDB consolidates the U.S. Government's TERRORISM screening and lookout databases into a single integrated 

TKKRORiS'i identities database. • • • u 

* NC TC initially was created by Executive Order 13354 (August 27, 2004) to serve as the primary organization in the 
U.S. Government for analyzing and integrating all intelligence possessed or acquired by the U.S. Government 
pertaining to I LRRORISM and counterterrorism, excepting purely domestic counterterrorism information. Executive 
Order 13354 was revoked by Executive Order 13470 (July 30, 2008) after NCTC was codified in IRTPA section 1021. 
» In addition to the provision of domestic KNOWN or siJSl>i ;CTi;o TliRRORISTS directly to the TSC, the TSC's TREX unit 
also provides the identities of international known or susPliCTHD i liRRORlSTS to NCTC for inclusion in TIDE. 
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1. 10 On August 27, 2004, the President issued Homeland Security Presidential Directive 1 1 
(HSPD-1 1), which "builds upon HSPD-6," to enhance TERRORIS I -related screening to more 
etT'ectively detect and interdict SUSPKC ITI) ti;rrorists and TERRORIST ACTiviTii;s. HSPD-1 1 
defines "SUSPECTED terroris i s" as "individuals known or reasonably suspected to be or have 
been engaged in conduct constituting, in preparation for, in aid of, or related to TERRORISM . . . 
and TERRORIST ACTivrriES." 

1.11 To enhance information sharing, another key component of the consolidated terrorist 
watchlisting system, the President issued Executive Order 13388, which provides that the 
head of each Agency that possesses or acquires TERRORISM INFORMATION shall promptly give 
access to that information to the head of each other Agency that has counterterrorism 
functions. 

1.12 On June 5, 2008. the President issued Homeland Security Presidential Directive 24 (HSPD- 
24) to further build upon the TERRORIST screening policies announced in HSPD-6 and HSPD- 
1 1 to protect the nation from TERRORIS i s by enhancing the use of biometrics. In HSPD-24, 
the President directed that ". . . agencies, shall, to the fullest extent permitted by law, make 
available to other agencies all biomctric and associated biographic and contextual information 
associated with persons for whom there is an articulable and reasonable basis for suspicion 
that they pose a threat to national security" (emphasis added). HSPD-24 underscores the 
value of biometrics in achieving effective TERRORISM screening and emphasizes the need for a 
layered approach to identification and screening of individuals, as no single mechanism is 
sufficient. 

1.13 The relevant TERRORISM screening Presidential Directives use words and phrases to describe a 
KNOWN or suSPECn-i) TERRORIST subject to n-RRORiST screening without defining them: 
"TERRORIST ini-ormation" (HSPD-6), "TERRORISM" (llSPD-6), "appropriately suspected" 
(HSPD-6), "reasonably suspected" (HSPD-1 1), and "articulable and reasonable basis for 
suspicion" (HSPD-24). Thus, previous watchlisting guidance supplied definitions of key 
terms and the standard that would apply to terrorist watchlLsting decisions. 

1.14 Neither HSPD-6 nor HSPD-1 1 defines "TERRORISM and/or TERRORIST ACTIVITIES." While 
federal law contains numerous definitions of"terrorism"", for watchlisting purposes under 
this Guidance, "TiiRRORiSM and/or ti;rrorist AC 11 vrriES" combine elements from various 
federal definitions and are considered to: 

1 . 1 4. 1 involve violent acts or acts dangerous to human life, property, or infrastructure 



See Appendix 6, Executive Order 13388. 
" See 50 U.S.C. 1801(c) (Foreign Intelligence Surveillance Act (EISA) definition of "international terrorism"); 
Immigration and Nationality Act (PNA) § 212(a)(3)(B)(iii) [8 U.S.C. 1 1 82(a)(3)(B)(iii)l (defining "terrorist activity"); 
INA § 212(a)(3)(B)(iv) [8 U.S.C. 1 1 82(a)(3)(B)(iv)i (defining to "engage in terrorist activity"); 18 U.S.C. 2331(1) 
(defining "international terrorism"); 1 8 U.S.C. 2332(b) (defining "federal crime of terrorism"); Executive Order 13224, 
66 Fed. Reg. 49079 (September 23, 2001) (defining "terrorism"). 
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which may be a violation of U.S. law, or may have been, if those acts were committed in 
the United States; and, 

1 . 1 4.2 appear to be intended — 

1 .14.2.1 to intimidate or coerce a civilian population; 

1 .14.2.2 to influence the policy of a government by intimidation or coercion; or, 

1.14.2.3 to affect the conduct of a government by mass destruction, assassination, 
kidnapping, or hostage-taking. 



1.15 This includes activities that facilitate or support I BRRORISM and/or ri-RRORlST ACTIVITIES such 
as providing a safe house, transportation, communications, funds, transfer of funds or other 
material benefit, false documentation or identification, weapons (including chemical, 
biological, or radiological weapons), explosives, or training for the commission of an act of 
TERRORISM and/or TliRRORIST ACTIVITY. 

1.16 nSPD-24 speaks in terms of "articulable and reasonable basis for suspicion" to describe a 
KNOWN or SUSI>i;cti;d tfrrorist who should be watchlisted and represents the President's 
most recent explanation concerning U.S. policy regarding the individuals who pose a threat to 
national security and should be screened to better protect the American people. Accordingly, 
that standard has been adopted and is clarified in this Watchlisting Guidance in Chapter 3, 
Section II. 

1.17 On December 16, 2005, in accordance with section 1016 of IRTPA, the President issued a 
Memorandum for the Heads of Executive Departments and Agencies prescribing the 
guidelines and requirements in support of the creation and implementation of the Information 
Sharing Environment (ISE). In Guideline 5 of that Memorandum, the President directed, as 
he had earlier in Executive Order 13353 that the information privacy rights and other legal 
rights of Americans must be protected and that guidelines be developed and approved to 
ensure that "such rights are protected in the development and use of the ISE." In December 
2006, the President approved for issuance the ISE Privacy Guidelines by the Program 
Manager. 

1.18 A second addendum to the TSC MOIJ, Addendum W\ which supplements and incorporates 
by reference all provisions of the TSC MOU, superseded Addendum A and became effective 
on January 1 8, 2007. The Directors of National Intelligence, NCI C, and the TSC joined as 
signatories in Addendum B. Paragraph 7 of Addendum B introduces the term tdrroRIS T 
iDl'NTll-ll'RS to more clearly describe the type of TERRORIST identity elements that are deemed 



See Executive Order 13.353, Establi.shing the President's Board on Safeguarding Americans' Civil Liberties (August 

27,2004). „ .... 

" See Guideline* to Ensure that Information Privacy and other Legal Rights of Americans are Protected in the 
Development and Use of the Information Sharing Environment (December, 2006). 
See Appendix 4, Addendum B to the TSC MOU. 
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U//FOUO, without regard to the classification of the source material from which it is drawn. 
TRRRORIST IDFNTII IHRS include thosc listed in Addendum B (i.e., names and aliases; dates of 
birth; places of birth; unique identifying numbers; passport information; countries of origin 
and nationality; physical identifiers; known locations; photographs or renderings; fingerprints 
or other biometric data; employment data; license plate numbers; and any other terrorist 
IDRN Tll ll'RS that ORIGINATORS specifically provide for passage to the TSC). For example, 
email addresses and phone numbers are increasingly useful for screening purposes. 
ORIGINATORS should mark email addresses and phone numbers as U//FOUO whenever 
possible and pass these TF.RRORlST IDENTII-IF.RS to NCTC to forward to the TSC for inclusion 
in rSDB. ORlGlNAlORS are encouraged to provide all relevant and unclassified information, 
to include social media information when appropriate. 

III. CONSTITUTIONALLY PROTECTED ACTIVITIES 

1.19 First Amendment. First Amendment protected activity alone shall not be the basis for 
nominating an individual for inclusion on the Terrorist Watchlist.'^ The following are 
examples of protected Constitutional activities: 

1 . 1 9. 1 Free Speech. The exercise of free speech, guaranteed by the U.S. Constitution, 
includes more than simply speaking on a controversial topic in the town square. It 
includes such symbolic or other written, oral and expressive activities as carrying 
placards in a parade, sending letters to a newspaper editor, wearing a tee shirt with a 
political message, placing a bumper sticker critical of the President on one's car, and 
publishing books or articles. The common thread in these examples is conveying a 
public message or an idea through words or deeds. Speech that may be repugnant to 
ideas of the majority may still be protected by the U.S. Constitution. For the purpose of 
this Watchlisting Guidance, the right of protected free speech under the U.S. 
Constitution applies to U.S. PlCRSONS wherever they are located and to non- U.S. PERSONS 
located inside the United States. The right of protected free speech, however, is not 
unlimited and may not extend to some lawless action. 

1 .1 9.2 Exercise of Religion. The free exercise of religion covers any form of worship of a 
deity - even forms that are not widely known or practiced - as well as the right not to 
worship any deity. Protected religious exercise also extends to dress that is worn or food 
that is eaten for a religious purpose, attendance at a facility used for religious practice, 
observance of the Sabbath, raising money for evangelical or missionary purposes, and 
proselytizing. 

1.19.3 Freedom of the Press. Freedom of the press includes such matters as reasonable 
access to news-making events, the making of documentaries, and the posting of "blogs." 



" The Eirst Amendment does not apply to non-U.S. PKRSONS outside the United States. Before submitting nominations, 
NOMINATORS may consult with their Department or Agency counsel to determine whether a specific person is a U.S. 
PERSON and whether the questioned activity is entitled to Eirst Amendment protection. 
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1 . 1 9.4 Freedom of Peaceful Assembly. Freedom of peaceful assembly, often called the 
right to freedom of association, includes gathering with others to protest government 
action, or to rally or demonstrate in favor of, or in opposition to, a social cause. The 
right to peaceful assembly includes more than just public demonstrations - it includes, 
as well, the posting of group websites on the Internet, recruiting others to a lawful cause, 
marketing a message, and fundraising, which ail are protected First Amendment 
activities if they are conducted in support of an organizational, political, religious, or 
social cause. 

1.19.5 Petition the Government for Redress of Grievances. The right to petition the 
government for redress of grievances includes, for example, writing letters to Congress, 
carrying a placard outside the city hall that delivers a political message, recruiting others 
to one's cause, and lobbying Congress or an Executive Agency for a particular result. 

1.20 Equal Protection. The Equal Protection Clause of the U.S. Constitution provides in part that: 
"No State shall make or enforce any law which shall ... deny to any person within its 
jurisdiction the equal protection of the laws." The U.S. Supreme Court has made it clear that 
this applies as well to the official acts of U.S. Government personnel. Nominations, therefore, 
shall not be based solely on race, ethnicity, national origin, or religious affiliation. Any 
activities relating to this Guidance that are ba.sed solely on such considerations are invidious 
by definition, and therefore, unconstitutional. 

WATCHLISTING POLICIES 

1.21 Watchlisting Disclosures. The general policy of the U.S. Government is to neither confirm 
nor deny an individual's watchlist status. In addition to the provisions in Addendum B to the 
TSC MOV, which require NOMINATOR approval before TSDB information can be used in any 
process that might result in public disclosure, the 2007 Memorandum of Understanding on 
Terrorist Watchlist Redress Procedures (Redress MOU)'^' requires sCRiil'NIiRS lo contact the 
rSC if it receives a request for information or records that might reveal an individual's 
watchlist status. Approval would also be required from any entity which provided 
information used by a NOMINATOR during a nomination. Per the Redress MOU, ORKJINATING 
and NOMINATING AGHNCIHS are obligated to support scri:i:ni:r determinations - both at the 
administrative level and in litigation - and provide appropriate information, including 
unclassified substitutes as necessary. TSC, in conjunction with NCTC, the NOMINATORS, and 
the Department of Justice (DO.I), as appropriate, will ensure that representations regarding an 
individual's potential watchlist status are properly coordinated and approved. 

1.22 Legal or Use Restrictions. Because information in the TSDB comes overwhelmingly from 
intelligence sources and methods or sensitive law enforcement techniques. Paragraph 12 of 



See Appendix 8, Redress MOU. 

UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 

Page I 1 1 



UNCLASSIF1ED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



Addendum B to the TSC MOU'' requires that any recipient of information from the TSDB 
seeking to use TRRRORIST identity information in any legal or administrative process or 
proceeding obtain NOMINATOR approval before doing so. Approval from the entity which 
provided the information, if other than the NOMINATOR, is also required. Additionally, 
information from Foreign Intelligence Surveillance Act (FISA) collections may only be used 
in a proceeding with the advance authorization of the Attorney General, fhercfore, any ^ 
SCRKENRR seeking to use 'I'SDB information in any process or proceeding must contact I SC 
so that TSC can assist in obtaining approval from the NOMINATOR, owner of the information, 
or Attorney General, as required. 

1 .23 In addition to the foregoing restrictions, there are restrictions on sharing information with ^ 
foreign governments. Any TERRORIST ii)F;ntii UiR (as described in Addendum B to the TSC 
MOU) will be deemed U//FOUO and shared with the watchlisting community and foreign 
governments for watchlisting purposes pursuant to the terms of the TSC MOU. Accordingly, 
NOMINATORS should include, as appropriate, ri-RRORlST iDliNTli n;RS in documents that contain 
non-releasabic warnings {e.g., a report is not releasable to xxx/yyy/z7.z countries), unless the 
Ti'RRORis r idi;n i ii-ii;rs are restricted by some other authority that limits dissemination. If U.S. 
PERSON information is otherwise authorized for release to the foreign government, the non- 
releasable warning is disabled to allow dissemination of the information. 

V. WATCHLISTING STANDARD: IDENTIFYING AND SUBSTANTIVE 
DEROGATORY CRITERIA 

1 .24 Before a KNOWN or SUSPEC! HD l ERRORlS i is added to the Terrorist Watchlist, TSC reviews 
the nomination to determine whether it meets the following minimum identifying criteria and 
minimum substantive derogatory criteria for inclusion in the TSDB. 

1 .24. 1 Minimum Identifying Criteria. Each nomination must contain minimum 
identifying criteria for inclusion into the TSDB. Without this minimum identifying data, 
the nomination is not eligible for inclusion into the TSDB, or any of the TSC's 
supported systems. Chapter 2 sets forth guidance regarding both the minimum 
identifying biometric and biographic criteria for inclusion into the TSDB. Although 
riDF- accepts records containing less than these minimum criteria, such records will not 
be exported either to the TSDB for watchlisting or to the various supported systems used 
by the sCREKNRRs absent an exception described in the Watchlisting Guidance. 

1.24.2 Minimum Substantive Derogatory Criteria. In addition to the minimum 
identifying criteria, nominations to the TSDB are accepted based on a ri;asonaule 
SUSPICION that the individual is a KNOWN or SUSPECTED TERRORIST derived from the 



" See Appendix 4, Addendum B to the TSC MOU. 
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totality of the information reviewed for nomination. To demonstrate that the 
nomination has sufficient indicia of reliability to support this RBASONABLli SUSPICION 
determination, nominating AGi;ncif;s should implement processes designed to ensure 
that nominations are free from errors, that recalled or revised information is reviewed 
regularly, and that necessary corrections to nominations based on those 
revisions/retractions are made. NOMINATING AGENCIES should, to the extent possible 
given the nature of the reporting, verify the accuracy and reliability of the information 
included in nominations. In some cases, the nominating ACiENCY may not be able to 
evaluate the reliability of the information received; however, in such situations, the 
nominating agency can ensure that the information provided is an accurate 
representation of the information obtained. Chapter 3 sets forth further guidance 
regarding the application of the REASONABLE suspicion standard to TSDB nominations. 

WATCHLISTING PROCESS OVERVIEW 

1 .25 The authorities referenced in Section II of this Chapter created the framework for the 
watchlisting enterprise by combining various functions of existing government entities and 
joining them to new organizations with counterterrorism responsibilities. The resulting 
watchlisting enterprise consists of ORIGINATORS, NOMINA TORS, aggrega TORS, SCREi;ners 
and encountering agencies that are supported by the community-wide collection, nomination, 
and consolidation processes. 

1 .26 originators, nominators, aggregators, and screeners. All Executive Departments 
and Agencies have responsibility for collecting, collating, and sharing l ERRORlSM 
INFOI^ATION to support the watchlisting process. They are called ORIGINATORS because they 
initially collect and identify information supporting the conclusion that an individual is a 
KNOWN or SIJSPEC TED TERRORIS I . An ORICilNATOR is the Department or Agency that has 
appropriate subject matter interest and classification authority and collects TERRORISM 
INFORMATION (i.e., raw information) and disseminates it or TERRORIST IDENTIFIERS to other 
U.S. Government entities via an intelligence report (i.e., finished intelligence) or other 
mechanism. In general, when an ORIGINATOR has identified international I l-RRORISM 

INI ORMA'l lON and determines that information should be provided to NCTC, the ORIGINATOR 
takes on the nominator role. A nominator is a Federal Department or Agency that has 
information to indicate that an individual meets the criteria for a KNOWN or SUSPECI i:d 
terrorist and nominates that individual to TIDE and the TSDB based on information that 
originated with that Agency. 

1 .27 While all NOMINA TORS have the duty of upholding informational standards, the NCTC and 
TSC are distinctly responsible for ensuring data quality and the integrity of their respective 
repositories. NCTC and TSC are themselves potential NOMINATORS. Analysts from the 



Please note that there are also certain exceptions to the minimum biographic information and minimum substantive 
derogatory criteria required for Terrorist Watchlist nominations that support immigration and visa screening activities 
conducted by DUS and DOS. 6ee Chapter 2, Section 111 and Chapter 3, Section V. 
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NCTC may discover an individual who is eligible for watchlisting while reviewing all-source 
information, in these cases, NC TC analysts will request that the ORIGINATOR submit a 
nomination for inclusion into TIDE; or, on a limited basis or during exigent circumstances, 
NC'l'C analysts may update TIDE directly with a disseminated report and notice to the 
ORIGINA rOR(s). In instances where disseminated reporting is used to enhance TIDE, NCTC 
will provide notice back to the collecting agency via TIDE. TSC may also nominate 
TERRORISM INFORMATION received pursuant to TERRORISM screening conducted by foreign 
governments. 

1.28 NCTC and I SC are responsible for reviewing both newly nominated individuals, as well as 
subsets of existing records, to determine if additional and/or enhancement (research) is 
required to locate missing information critical to the watchlisting process. In some cases, this 
will require research to locate additional Dl-ROCiATORY INI ORMAI ION to meet the minimum 
substantive derogatory criteria for watchlisting. In other cases, this will require research to 
locate additional biographic or biometric identifiers, in order to provide a comprehensive 
record maximizing the probability of confirming a positivf: ma i cii to an identity contained in 
the TSDB. 

1 .29 aogrI'GATORS are those who receive and hold terrorism information and certain other 
non-TERRORiSM information they arc authorized to receive and retain. I'or example, two of 
NC TC's main statutory missions are to serve as the (1) central and shared knowledge bank on 
KNOWN or SUSPECTED TERRORISTS and (2) primary organization in the U.S. Government for 
analyzing and integrating all intelligence information possessed or acquired by the U.S. 
Government pertaining to I I-RRORISM and counterterrorism. " 

1 .30 TSC takes on the role of an AGGREGATOR when a KNOWN or SUSPECTED TERRORIST is 
encountered and the individual's record is enhanced or updated with i;NCOUNTER-related 
information. As noted in Paragraphs 1.1 and 1 .7, the TSC manages the watchlisting process 
and plays a key role in helping Departments and Agencies determine whether an ENCOUNTER 
with a member of the public is one with a KNOWN or SUSPECTED TERRORIS I . Additional 

l liRRORlSM INFORMATION or TERRORIST IDEN TIFIERS are generated during ENCOUN ri: RS and the 
Encounter Management Application (EMA)^" uses that information to update records of 
KNOWN or SUSPECl ED lERRORISTS. 

1 .3 1 SCREENERS vet against the TSDB to determine if an individual is a possible match to a known 
or SUSPECTED I i-RRORIS T in the TSDB. screi;ners can include federal, state, local, tribal, 
territorial, or foreign governments and certain private entities. Screening officials include 
homeland security officers, consular affairs officers, transportation safety personnel, and 
officials of foreign governments with whom the United States has entered into a terrorism 
SCREi;ning ini-ORMA TION sharing agreement pursuant to HSPD-6. Certain Departments and 
Agencies have components which perform both screening and law enforcement duties. If a 



50U.S.C. §404o. 

'° HMA is an application used by the TSC to administer ENCOUN IER information. 
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SCREENER believes an individual may be on the Watchlist, the screener contacts the TSC's 
Terrorist Screening Operations Center (TSOC). The TSOC will determine whether the 
individual the SCREENER has encountered is, in fact, a POSITIVE MA I QI to the individual who 
is on the Terrorist Watchlist. The TSOC may also notify the FBI's Counterterrorism Division 
(CTD) that there has been a positive ENCOUNTER with a watchlistcd subject. TSC's Terrorist 
Screening Operations Unit (TSOU) coordinates the appropriate operational response to the 
ENCOUNTER. Based on the TERRORISM INFORMAI ION made available by the ORIGINATING 
AGENCY, the SCREENER will take action based upon its specific authorities {e.g., requiring 
additional screening at an airport checkpoint, denying a visa application, determining 
admissibility into the United States) and follow appropriate ENCOUNTER procedures, as set 
forth in Chapter 5. 

1 .32 Collection, Nomination, Consolidation and the Use of the Terrorist Watchlist to Perform 
Screening Processes. The following is a chart depicting the collection, I ERRORIST 
nomination, consolidation and screening processes: 
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1 .33 The arrows fade inside the I'SDB cylinder because not every nomination from NCTC (for 
international TliRRORlSM) or the FBI (for domestic TERRORISM) is exported from the TSDB to 
SCRiiENERS (represented by the multi-colored blocks at the far right of the chart).^' For 
example, certain categories of individuals that do not meet the minimum identifying criteria 
(see Chapter 2, Section II) or the ri;asonable suspicion standard (see Chapter 3, Section II) 
can be watchlisted to support immigration and visa screening activities by DHS and DOS (see 
Chapter 3, Section V) but arc not exported to state/local/tribal SCREENERS or foreign partners. 
Similarly, when ORIGINATORS provide 1 RAGMENTARY INFORMAIION to NCTC for inclusion in 
TIDE, such information will not be exported from TIDE to the TSDB, unless the NOMINA riNCi 
AGl'NCY believes there is REASONABLE SUSPICION to believe that the individual is a KNOWN or 
SUSPECTED TERRORlsr. FRAGMENTARY INFORMA TlON is provided to NCTC where it can be 
further analyzed, connected to existing information, and added to TIDE for export to TSDB 
because NC fC, and not individual ORlCilNA TORS, has access to all the information available to 
the U.S. Government on a known or suspected terrorist. 

VII. ROLES AND RESPONSTBILITES FOR THE WATCHLISTING AND SCREENING 
COMMUNITY 

1 .34 Delineation of roles and responsibilities of NOMINATING AGENCIES, SCREENERS, NCTC, and 
the TSC is critical to provide for an effective and efficient integrated Terrorist Watchlist 
enterprise. While I lSPD-6 describes the broad mandate of developing an integrated watchlist 
system, and the 7\SC A/Of/ provides a level of detail needed to fulfill that mandate, further 
clarification is required to ensure there are neither gaps in the nomination process, nor 
wasteful redundancies. 

1 .35 Pursuant to HSPD-6, Departments and Agencies in the Executive Branch are required, to the 
extent permitted by law, to provide l ERRORlST INFORMATION to NCTC. This process will be 
accomplished cither through direct nomination to NCTC, or through a specific component 
designated by a Federal Department or Agency head fordoing so (e.g., all DOJ components 
are directed to nominate through the FBI; DHS Intelligence and Analysis (l&A) has oversight 
responsibility for all DHS nominations). Except as detailed in the sections applicable to 
expedited nominations (see Paragraphs 1 .58 and 1 .59), NOMINA TING AGENCIES will endeavor 
to provide comprehensive nominations and include the maximum amount of identifying and 
DEROGA rORY INFORMA I ION.^^ NOMINATING DEPAR TMENTS AND AGENCIES should prioritize 



The Terrorist Screening Database Annex D to the FBI Memorandum of Understanding with Department of Defense 
(DoD), signed February 22, 20 1 2, established DoD as a screening agency customer of the TSC. The dashed line in the 
latter chart represents that DoD is finalizing procedures to receive and use information from the TSDB for its screening 
processes. 

In May 2010, the Deputies asked that NOMINATING AGENCIES "ensure that nominations are comprehensive and 
include the maximum amount of identifying and DEIUXiA lORY ini orma i ion." In 2012, the Interagency Policy 
Committee (IPC), in coordination with Nomina lORS, scRiiENFRS, NCTC and TSC, developed a prioritized list of data 
identifiers that arc critical to screening and identity resolution activities. This Identity Resolution and Enhancement 
Tiers document is available on NCTC's Watchlisting Community of Interest portal on the Joint Worldwide Intelligence 
Communications System (JWIC'S). 
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the identification of new KNOWN or SUSPECTED TERRORIS I S who meet the REASONABLE 
SUSPICION standard, along with the identifying and DEROGATORY INI ORMA TION most useful to 
watchlisting, and screening effort, as well as assisting in identity resolution. 

1.36 Each Department or Agency that nominates a KNOWN or SUSPECTED TERRORis i to NCTC for 
watchlisting is under a continuing obligation to provide NCTC with newly identified 
DERO(jATORY INI ORMATION or exculpatory information obtained by that Department or 
Agency. Each Department or Agency also has the responsibility to provide NCI C with newly 
identified identifying and DEROGATORY information obtained from their Department or 
Agency, regardless if they were the original nominating AGENCY. 

1.37 With the noted exception of the Visa Viper Program, Departments and Agencies should not 
nominate KNOWN or SUSPECTED TERRORIS TS to NCTC based on information that they do not 
originate without first coordinating with the ORIGINATOR. 

Vlll. QUALITY CONTROL MEASURES 

1.38 In order to produce and maintain the most reliable and accurate information in TIDE, TSDB, 
and screening databases, quality control is considered a responsibility of all entities. 
NOMINATING DEPARTMENTS AND AGENCIliS must establish and maintain processes, including 
appropriate training and guidance, to ensure information transmitted to NCTC is consistent 
with the source of the information. 

1.39 HSPD-6 Requirements. HSPD-6 requires the TSC to maintain thorough, accurate, and 
current information concerning KNOWN or SUSPECTED TERRORIS TS. For watchlisting purposes, 
"current" means information that the NOMINATING AGENCY reasonably believes is valid and 
accurate. The requirement that information be current docs not necessarily preclude 
information that is several years old from being included in the TSDB if there is no reason to 
believe the information may have changed (e.g., information regarding an individual's date of 
birth or h;rroris I ACTIVH'Y was collected 20 years ago but has nut been superseded by 
additional information is still relevant), nominators should consider the date of the 
DEROGATORY INFORMATION in the context of analyzing the overall quality of the data, as well 
as the severity of the threat, to determine whether the individual warrants watchlisting. The 
date of the deroga lORY INI'ORMA IION may refer to both the date the information is collected 
(such as a report that was collected 50 years ago) as well as the date of the information that is 
referenced in the reporting (such as a recent report that references an event that occurred 50 
years ago). 

1 .40 TSC MOV Obligations. Paragraph 1 5 of the TSC MOU provides that the TSC "will 
determine, according to criteria established jointly with the entity responsible for each 
supported system, which supported screening processes will query that entry in the 
consolidated TERRORIST screening database." Pursuant to that paragraph, the I'SC is required 
to "make these determinations based on criteria and procedures developed in coordination 
with the Parties to this Memorandum and in consultation with the heads of appropriate Federal 
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Departments and Agencies based on factors, including but not limited to, the following: 

1 .40.1 the nature of the person's association with TERRORISM; 

1 .40.2 the quality of the data, including credibility, reliability, and extent of 
corroboration; and, 

1 .40.3 the extent of uniquely identifying data. . . 

1 .41 Provide Guidance and Training. Rach Agency will provide guidance on the watchlisting 
business process. Analysts will receive periodic refresher training, as needed. 

1 .42 NOMINATING AGENCY Procedures. Each NOMINATOR providing international TERRORIST 
watchlisting nominations to NCTC is responsible for the accuracy of its information and has a 
continuing responsibility to notify NCTC of any changes that affect the validity or reliability 
of such information.^* NC TC analysts will review each nomination for TERRORIST 
watchlisting prior to its inclusion into TIDE and its export to the TSDB. 

1 .43 Each nominating agency should implement processes designed to ensure that nominations 
are free from errors, that recalled or revised information is reviewed regularly, and that 
necessary corrections to nominations based on those revisions/retractions are made. 
NOMINAT ING AGENCIES should, to the extent possible given the nature of the reporting, verify 
the accuracy and reliability of the information included in nominations. The following 
represents the type of processes that each NOMINAUNG AGENCY shall develop that arc tailored 
to each Agency's particular mission and operational environment: 

1 .43. 1 Develop Adequate Factual Predicate. Each NOMINATING AGENCY will seek to 
obtain as much di;roga lORY informa HON and identifying information as practicable 
concerning the KNOWN or SUSPECTED TERRORIST who is being nominated. 

1.43.2 Provide Guidance and Training. Each NOMINATING AGENCY will provide guidance 
on the I I-RRORIST watchli.sting nomination process and ensure that analysts involved in 
the nomination process are trained on a periodic basis. 

1 .43.3 Require Quality Assurance Review. Each NOMINATING AGENCY will use a quality 
assurance process to review nominations for accuracy prior to forwarding the 
information to NCTC. 

1 .43.4 Heightened Review for U.S. PERSONS. The nominations of U.S. PERSONS require 



" See Appendix 3, TSC MOU. 

PlJRni.Y DOMi-STic TERRORISM INFORMATION is provided directly to TSC by the FBI and is subject to the 
conditions applicable to the nomination procedures for those associated with international terrorism. 
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special considerations and procedures. See Paragraph 3.15. 

1 .43.5 U.S. PERSON Determinations. Nomina lORS must take reasonable steps to determine 
whether an individual is a U.S. PERSON. 

1 .43.6 U.S. PERSON Review and Confirmation. Nominations of U.S. PliRSONS to the 
Terrorist Watchlist shall be reviewed by the NOMINA'i lN(i AGP.NCY's legal counsel or a 
designated reviewer to confirm that the RliASONABl.i: SUSPICION standard has been met 
or that the nomination meets an exception to the REASONABLE SUSPICION standard, and 
to ensure that the nomination conforms to Agency specific U.S. PERSON authorities and 
guidelines. 

1.43.7 Reliability and Accuracy Limitations. Nominations will include any limitations on 
the reliability or accuracy of the information. 

1 .43.8 Periodic Reviews. The NOMINATING AGENCY will conduct periodic reviews of their 
nominations of U.S. PERSONS to the Terrorist Watchlist, at minimum on an annual basis, 
when there is no corresponding FBI investigation to ensure that the U.S. person 
continues to meet watchlisting criteria. 

1 .43.9 Redress Procedures. As per the establishment of a formal watchlist redress process 
(see Chapter 1, Section XI), entities involved in the watchlisting process shall establish 
internal reviews and redress procedures. 

1 .44 Each nominating agIsNCY will have procedures that facilitate the prevention, identification, 
and correction of any errors in information that is shared as part of the watchlisting process. 
Procedures will include the review of retractions and/or corrections of information that may 
have been used to support a nomination. In cases where a retraction or other information has 
become available, the NOMINA I'ING agi-ncy will promptly send a watchlist removal request or 
modification, as appropriate, to NC TC. Each NOMINA TING AGENCY must provide notice of 
any errors or outdated infonnation to NCTC immediately unless there is an articulated reason 
why such notification could not be made immediately. NC'IC will process and transmit to 
TSC such corrections upon receipt. 

1.45 NCTC Review. In addition to review by NCTC analysts, NCTC will employ a quality 
control process to ensure that all standards and appropriate procedures have been employed, 
the data is accurate, and the presentation of the material is clear, concise, and complies with 
established definitions and conventions. NCTC must also have processes and procedures in 
place to ensure the information documented in TIDE and provided to the TSC is accurately 
transcribed. NC TC shall ensure there is a process in place for review and/or auditing of TIDE 
records. 



See Executive Order 12333, as amended, and 5 U.S.C. 552a(eK7). 
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1.46 TSC Review. TSC personnel will review the nominations received as described in Paragraph 
1 .56. TSC personnel evaluate whether nominations meet watchlisting standards and weigh, as 
appropriate, all-source analysis before accepting or rejecting a nomination. The TSC has a 
critical role to play in quality control, as the TSC review is the last step before any record 
(including a biometric nomination where no name is available) is sent to various screening 
systems. As with NCTC, the TSC should ensure there is a process in place for review and/or 
auditing of TSC nominations and TSC records. 

IX. NOMINATION PROCEDURES 

1 .47 Distinctions between U.S. PERSONS under Executive Order 12333 and Aliens under the 
Immigration and Nationality Act. This Watchlisting Guidance generally adopts the 
definition of U.S. PERSON from Executive Order 12333 (as amended) for nomination 
procedures. Executive Order 12333 defines a U.S. PJiRSON as "A United States citizen, an alien 
known by the intelligence clement concerned to be a permanent resident alien, an 
unincorporated association substantially composed of United States citizens or permanent 
resident aliens, or a corporation incorporated in the United States, except for a corporation 
directed or controlled by a foreign government or governments." The Watchlisting Guidance 
also contains certain exceptions to the minimum substantive derogatory standards for 
TRRRORlS l watchlisting that support immigration and visa screening activities by the DMS and 
DOS to determine whether ineligibilities exist for admission to the United States or visa 
adjudication pursuant to the Immigration and Nationality Act (INA). Because the INA 
defines "aliens" as any person not a citizen or national of the United States, the INA 
admissibility provisions also apply to Lawful Permanent Residents (LPRs), in certain 
circumstances, who are considered U.S. PERSONS under Executive Order 12333. 
Consequently, NC I C developed a mechanism in TIDl-: to identify and distinguish U.S. 
citizens from non-U. S. citizens in order to further distinguish between "alien.s" under the INA 
and U.S. PERSONS under Executive Order 12333.^^ 

1.48 ORIGINATOR'S Nominations Procedures. As mentioned in Paragraph 1.26, when an 
ORIGINA lOR becomes a NOMINA ICR, it prepares a nomination document and forwards it to 
NCTC through the NOMINATOR tool. 

1 .48. 1 As a general rule, NCTC will attach all disseminated communications (cables or 
forms) to the TERRORlsr identities record as a "source" document, which will be 
available on NCTC Current or the Joint Worldwide Intelligence Communications 
System (JWICS) to individuals who have been granted access to TIDE. 

1.48.2 Because NCI C is the conduit for passing international TERRORISM INI-ORMA I ION to 
TSC for lERRORiSM screening purposes, there is no longer a need to send watch list 
requests to multiple Government Agencies. By sending a Terrorist Watchlist 
nomination cable to NCTC, all potential U.S. Government terrorism screening 

'"See INA § 101(a)(3) [8 U.S.C. 1 101(a)(3)J. 
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responsibilities should be accounted for. 

1 .48.3 I'he DOJ has approved a Protocol to govern I BRRORIS r nominations for its non-FBI 
components, which requires components to provide the FBI with all i errorism 
INFORMATION.^^ The FBI is responsible for submitting watchlisting nominations based 
on information received from other DOJ components pursuant to the FBI's nomination 
procedures. 

1 .48.4 DHS has designated the Under Secretary for I&A as the Executive Agent for DHS' 
centralized l liRJlORlST watchlisting process and he/she shall be responsible for providing 
a DHS widc-mcchanism for nominating all identifying or niiROGATORY information 
about KNOWN or SUSPF.CTF.D TF.RRORISTS to TIDE. DHS I&A is also responsible for 
providing training/certification programs to the components. 

1.49 In providing information to NCTC for inclusion into TIDE, the ORIGINATOR is responsible for 
determining whether it may, by law, provide the information to NCTC, in accordance with 
section 1021(d)(6) of IR TPA. This information shall be provided with any applicable caveats 
or dissemination controls, which will be reflected in TIDE. The biographic and biometric 
identifiers derived from this information will be deemed U//FOUO for passage to TSDB 
unless the originator designates them as "TIDE Restricted," as outlined in Addendum B to 
ih^rSCMOU. 

1.50 NCTC Actions and Processes. NCTC reviews I LRRORIST nominations from Federal 
Departments or Agencies (NOMINATORS) as described in Paragraph 1 .28. 

1.51 In determining whether an individual is a KNOWN or SUSPIXTED TFRRORlS r, NCTC will rely 
on the designation of "KNOWN l liRRORlS l " provided by the nominator as presumptively 
valid. This presumption can be overcome if NCTC has specific and credible information 
within its possession that such designation is not appropriate, at which point NCTC will 
provide such information to the nominator. 

1.52 In reviewing whether to include the terrorism information about the KNOWN or SUSPECTED 
terroris t in TIDE, NCTC reviews the totality of information. The totality of information is 
evaluated based on the experience of the reviewer, and the facts and rational inferences that 
may be drawn from those facts, including past conduct, current actions, and credible 
intelligence concerning future conduct. As part of this review, NCfC will determine if the 
information pertains to, or is related to, TERRORISM. TIDE includes TERRORISM INFORMATION 
on KNOWN or suspi:cri;D ierroris i s and may include additional terrorism informa i ion 
beyond what meets the minimum substantive derogatory and identifying criteria required for 
nominations to the TSDB, as described in Paragraph 1 .24. Upon conclusion of NCTC's 
review, NCTC will either accept or reject the nomination: 



^' See Appendix 7, DOJ Protocol on Terrorist Nominations. 
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1.52.1 Accept Nomination, if a nomination contains TERRORISM INFORMATION, NCTC 
will create or enhance the associated T\D\l record with the data contained in the 
nomination. If the minimum substantive derogatory and identifying criteria are met, 
NCTC will forward the TliRRORlS l' idi;ntii ii;rs to the TSC for placement in TSDB with 
the NOMlNAlOR'S watchlist recommendation. 

1 .52.2 Reject Nomination. If a nomination does not contain TERRORISM INFORMATION, 
NCTC may reject the nomination. NCTC will review rejected nominations and search 
holdings for additional data that may support a terrorism informa I ion finding. If no 
information is found to support the nomination, NCTC will notify the nominai'ING 
agency of the rejection. 

1 .53 Types of records in TIDE. There are two types of records in TIDE: 

1 .53. 1 TERRORIST Records. The vast majority of records in TIDE arc for KNOWN or 
SUSPF.CI i:o international TiiRRORlS rs. fhese records arc labeled " I i;rroris TS." Only a 
small percentage of FERRORIST records in TIDE concern U.S. PERSONS. 

1 .53.2 Non-TERRORIST Records. A small percentage of records in TIDE are identified and 
labeled "Non-l ERRORls rs." These records are generally of familial family members 
or associates of KNOWN or SUSPECTED TERRORISTS and assist DOS and DHS in, for 
example, adjudicating visas and immigration processing, or assist the IC in tracking 
KNOWN TI'RRORIS IS. Thesc "IMon-TERRORlSls" include: 

1.53.2.1 Alien Spouses and Children of TERRORISTS. Based on section 
212(a)(3)(B)(i)(lX) of the IN A, alien spouses and children of lERRORiSTS may be 
inadmissible to the United States.^^ TIDE exports records pertaining to alien 
spouses and children of alien international i iiRRORlS l S (also known as TIDE 
Category Code 17) to support immigration and visa screening activities by DOS 
and DHS; 

1 .53.2.2 Other Relatives. TIDE also includes "non-TERRORlST" records of 
individuals who have a close relationship to a KNOWN or SUSi'EcriiD international 



TIDli records for non-U.S. citizens, including LPRs, with insufficient DEROGATORY INTORMATION to meet the 
REASONABLK SUSPICION Standard (TIDE Category Code 99) and records relating to an individual who has a defined 
relationship with the known or SUSPRcruiJ l liRKORlST, but whose involvement with the KNOWN or SUSPIXTFD 
I F.RRORis r'S activities is unknown (TIDE Category Code 50) are exported to the I SDB as TSDB exceptions to the 
RF.ASONAB1.I-: SUSPICION standard. Additionally, individuals described by sources as "TFRRORlSTs", "extremists", 
"jihadists", "militants", "mujahideen" or "insurgents" (TIDE Category Code 03, also referred to as a "labels plus" 
nomination) will be accepted into the TSDI) as exceptions for export to DttS and DOS for immigration and border 
processing. See Paragraph 3. 14.6. A complete list of TIDE Category Codes can found under the "Watchlisting Criteria 
Guidance" section on the Intelink website at http://www.intc l ink.iiov/tsc/leual .hlm. 

"Any alien who. ... is the spouse or child of an alien who is inadmissible under this subparagraph, if the activity 
causing the alien to be found inadmissible occurred within the last 5 years, is inadmissible." See INA § 
2l2(a)(3)(B)(i)(IX)18 U.S.C. 1 182(a)(3)(B)(i)(lX)J. 
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TERRORIST but arc not alien spouses or children of a TKRRORls r. I 'or instance, the 
father or brother of a tfrrorist could have a record in TIDE (also known as TIDE 
Category Code 160). Thus, these "other relatives" could be U.S. persons or non- 
U.S. Pl-RSONS. Identifiers for these other relations reside in TIDE but are not 
exported to the TSC for watchlisting, absent independent DEROGATORY 
INFORMATION. Instead, these records may be retained in TIDE for analytic 
purposes; 

1 .53.2.3 Passports. Unrecovcrcd lost or stolen passports in the hands of international 
TERRORISTS (also known as TIDE Category Code 89); 

1 .53.2.4 Associates. Individuals who have a defined relationship with the KNOWN or 
SUSPECTED TERRORIST, but whose involvement with the KNOWN or SUSPECTED 
TERRORIST'S activities is unknown (also known as TIDE Category Code 50); 

1 .53.2.5 Individuals with a Possible Nexus to TERRORISM. Individuals with a 
possible nexus to 1 ERRORISM and/or TERRORIST Ad lVlTY but for whom additional 
DEROCJATORY INl'ORMA HON is needed to meet the REASONABI.I'; suspicion standard 
(also known as FIDE Category Code 99). 

1.54 Identification of U.S. PERSON Status in TIDE. NCTC analysts will review the totality of 
information available on a subject to discern U.S. person status prior to creating or 
enhancing a record in TIDE, whenever possible. For existing TIDE records, this status is 
available to the analyst in the first field of the TIDE record. In case of external 
nominations or eniianci;ments from the IC, the standard nomination template provides a 
means for NOMINATORS to identify U.S. PERSON status pursuant to Executive Order 12333 
and the Agency's specific guidelines. The U.S. PERSON status field on the standard 
nomination template is a required field and it is the responsibility of each NOMINA TING 
AGENCY to ensure the field is properly annotated in accordance with established policy. 

1.55 Types of Records in TIDE and the TSDB. Not all records in TIDE are included in the 
TSDB. For example, records with fragmen tary informa tion that do not meet the 
minimum derogatory standard or records that do not meet identifying information criteria 
remain in TIDE and are not included in the TSDB, absent direction for temporary, threat 
based categories pursuant to Paragraph 1 .59.^° The nominations process for FIDE records 
that will be considered for entry in the TSDB begins with an automated data transfer process 
that moves an individual TIDE record containing the identity of a KNOWN or SUSPECTED 
terrorist or other exportable category or record nominated for watchlisting to the TSDB. 

1 .56 TSC Actions and Processes. The TSC's Single Review Queue (SRQ) enables the TSC's 
Nominations and Data Integrity Unit (NDIU) to review each KNOWN or suspected terroris t 



Certain categories of non-TERRORiST records {see Paragraph 1 .53.2) or nominations to the No Fly and Selectee List 
based on an expedited waiver of "full date of birth" requirement (see Paragraph 4.18) may also be eligible for inclusion 
in the TSDB. 
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record nomination to ensure it meets the watchlisting standard.^' The SRQ also helps ensure 
that all qualified records are made available to the appropriate SCRF.ENERS for use in 
I I-RRORISM screening. During the SRQ process, every request to add, modify, or delete a 
rSDB record is reviewed by a TSC analyst to ensure the accuracy of watchlisting records and 
the removal of inaccurate records from TSDB. 



1 .56. 1 Within the TSC's NDIU, experienced analysts and/or designated Agency 
representatives serve as Subject Matter Hxperts (SMEs) with respect to specific 
databases (e.g.. No Fly or Selectee List) that receive TSDB data for terrorism 
screening purposes. I'he NDIU currently has four types of SMEs who specialize in the 
information/systems from their respective organizations: Dl IS/Transportation Security 
Administration (TSA) for the No Fly, Selectee and Expanded Selectee Lists, FBI for 
National Crime Information Center (NCIC)/known or SUSPECTED i errorist File 
(KSTF), DOS for the Consular Consolidated Database (CCD)^^ and DHS for I HCS (and 
its components) and the Automated Targeting System (ATS). SMEs provide guidance 
regarding their specific information/systems to the TSC and watchlisting standards to 
their Agencies. In some cases, the SME coordinates the data export to the supported 
system, provides feedback to nominators, and responds to inquiries regarding their 
supported system from other TSC customer Agencies. 

1 .56.2 Upon the conclusion of TSC's review, TSC will either accept or reject the 
nomination: 



1 .56.2.1 Accept Nomination. Consistent with Paragraphs (7) and (8) of Addendum B 
to the TSC MOU, if a nomination contains the minimum substantive derogatory 
criteria and the minimum identifying information, TSC will create a TSDB record, 
include the terrorist iden TH IERS from the TIDE record, and export the TSDB 
record to its supported systems {i.e., databases and systems eligible to receive 
records from ihe TSDB) for the benefit of SCREe:ners that conduct TERRORISM 
screening. The current supported systems include, but arc not limited to, the 
following: 

L56.2.1.1 NCIC/KSTF; 

1 .56.2. 1 .2 DOS Consular Lookout and Support System (CLASS)-VISA and 
CCD; 

1 .56.2. 1 .3 Dl IS Watchlisting Service (WLS) {e.g., TECS, ATS, Secure Flight); 

1 .56.2. 1 .4 TSA Transportation Security Vetting Center; 

1 .56.2. 1 .5 rSA-Office of Intelligence Analysis (OIA); 

1 .56.2. 1 .6 Tipoff United States Canada ( TUSCAN); 



" See Chapter I, Section VIII, supra. 
CCD is ail application used by DOS to administer its visa and passport applications. 
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1 .56.2. 1 .7 Tipoff Australia Counlerterrorism Information Control System 
('lACTICS). 

1.56.2.2 Reject Nomination, ii' a nomination lacks either the minimum substantive 
derogatory criteria or the minimum identifying information, and is not an 
exception to those requirements (e.g., TIDE Category Codes 50 or 99 as described 
in Paragraph 1.53.2), TSC will reject the nomination and notify NCTC directly of 
its determination or coordinate with NCTC to notify the NOMINA I OR of its 
determination. Records nominated to TIDE that are ineligible for niRRORlST 
watchlisting may remain in TIDE until additional information is obtained to 
warrant either watchlisting or removal from TIDE. NC TC analy.sts will review all- 
source information for additional identifying or substantive DliROCiATORY 
INFORMATION. If additional information is discovered, NCTC will enhance the 
TIDE record and submit the record to TSC for inclusion in the TSDB. The TIDE 
record will be reviewed again by the TSC to determine whether it is eligible for 
watchlisting in TSDB and export to certain supported screening systems. 

1.57 The number of TSC's supported systems will continue to grow as TSC, DHS, and DOS 
expand their domestic and international outreach efforts and finalize additional agreements to 
exchange TCRRORISM .scri;i;ning ini'ORMATION. TSC has modified the 'fSDB so that certain 
customers may query the TSDB remotely instead of receiving exports of TSDB data to their 
own systems. 

1.58 Expedited Nomination Procedures for Individual Nominations. If exigent 
circumstances exist (imminent travel and/or threat) where an individual nomination into the 
'fSDB needs to be expedited after normal duty hours, a nominator, with coordination from 
NC rc, may contact the TSC's TSOC directly. If a NOMINA rOR coordinated with NCTC, the 
nomination will be received by the TSC via the SRQ in TSDB and the TSOC Watch 
Commander will coordinate with a NDIU Senior Analyst to process the nomination. A 
NOMINATOR may also contact the TSC directly and provide all relevant information using the 
following process: 

1 .58. 1 Th e NOMINA r OR must first contact the TSOC at 866-^^^H (toll free number) or 
at 57 1 -^^H. 

1 .58.2 The NOMFNATOR will be instructed by a TSOC Specialist on how to telephonically 
complete a Terrorist Screening Center Expedited Nomination Request Form. 

1.58.3 In addition to basic identifying information, the nomina tor will be requested to 
provide a 24/7 point of contact should the KNOWN or SUSPECTBD TKRRORlS l be 
encountered by a SCRF.enrr. 



" .See Paragraph 1 .24.2 supra. 
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1 .58.4 Within 72 hours of contacting the TSOC, the NOMINA FOR must provide appropriate 
follow-up documentation that articulates, through either classified or unclassified means, 
the substantive DEROGATORY iNFORMAliON used to establish the basis for l liRRORlST 
watchlisting. 

1.59 Expedited Nomination Procedures for Temporary, Threat-Based Categories. This 
provision is intended to enable categories of individuals to be temporarily upgraded in 
watchlist status based on current and credible intelligence information or a particular threat 
stream that indicates a certain category of individuals may be used to conduct an act of 
domestic or international i krrorism. This temporary, threat-based expedited upgrade (TBU) 
is made at the direction of the Assistant to the President for I lomeland Security and 
Counterterrorism or his/her designee (Appropriate Official) and should be narrowly tailored to 
address the threat. 

1 .59. 1 The goal of this provision is to fashion a watchlisting response that is appropriate to 
the nature, specificity, and severity of the threat. To achieve this goal, in addition to 
verifying the credibility of the threat intelligence, due consideration should be given to: 

1 .59. 1 . 1 The harm to public safety posed by the threat; 

1 .59. 1 .2 The clarity and specificity of the information giving rise to the threat as to 
time, place, method, and identity of the suspected perpetrators; 

1 .59. 1 .3 The anticipated impact on international and domestic travel, civil liberties, 
and foreign relations; and, 

1 .59.1 .4 The best available screening tools, other than the No Fly or Selectee Lists, 
given the type and specificity of identifiers and travel data. 

1 .59.2 When necessitated by exigent circumstances, and where there is current and credible 
intelligence information or a particular threat stream that indicates a certain category of 
individuals may be used to conduct an act of domestic or international ti:rrorism, the 
Appropriate Official may direct the TSC and NCTC to place categories of individuals 
from TIDE or TSDB on the No Fly List, Selectee List, or into the TSDB for up to 72 
hours before concurrence is obtained from the Deputies or Principals Committee. To the 
extent practicable, the initial direction to NCTC and TSC from the Appropriate Official 
will be in writing. Absent DEROGATORY INI ORMA I ION supporting individual nomination 
or watchlist upgrade, if written concurrence is not obtained within 72 hours of the initial 
direction to TSC and NC TC, the TSC will automatically remove any individuals added 
to the No Fly List, Selectee List, or TSDB pursuant to the TBU, until such written 
direction is received. 

1 .59.3 The addition of categories of individuals to the No Fly List, Selectee List, or TSDB 
pursuant to Paragraph 1 .59.2 shall be effected for a period of time, consistent with the 
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nature of the threat involved, not to exceed 30 days but may be renewed for additional 
30-day periods upon written approval of the Deputies or Principals Committee. A TBU 
is valid until the threat no longer exists. To the extent that such threat recedes or is 
otherwise mitigated prior to the expiration of 30 days or during any extension approved 
by the Deputies or Principals Committee, TSC and NC TC and members of the 
watchlisting community shall immediately request of the Deputies or Principals 
Committee to downgrade these TBUs to their original or appropriate status. All threat- 
based records transmitted through automated mechanisms (i.e., WLS, CCD) will include 
a "TBU indicator" at the message level to differentiate this category of records from 
non-TBU records and to provide the I'BU directive for which the record is upgraded. 

1 .59.4 Until such time as the Deputies or Principals provide additional, written guidance, 
DOS will defer visa actions with respect to these expedited upgrades in watchlist .status. 

1 .59.5 Departments and Agencies will advise the Deputies or Principals of other 
consequences that may result from a change in watchlist status and seek guidance as to 
how to proceed. 

1 .59.6 After these categorical moves are accomplished or renewed, there will be an 
expedited procedure for the review of all u. S. persons that arc part of the TBU to ensure 
their watchlisting status is appropriate (including whether continued categorical 
watchlisting may be warranted based on the nature of the threat). 

1 .60 Arbitration of Watchlisting Disputes. If a nominator wishes to dispute TSC's 
watchlisting determination, it may contact NCTC (for international TlvRRORIsr nominations) 
to discu.ss the watchlisting status and/or submit additional substantive derogatory and 
identifying information to support its initial nomination. Additional information provided to 
NCTC by a nominator will be passed to the I SC for review and final watchlisting 
determination. In the case of an FBI dispute over the TSC's watchlisting determination of an 
international TERRORISI 'S nomination, a case agent must contact the TSC. 

1.61 In the case of domestic TERRORIST nominations, if the FBI wishes to dispute TSC's 
watchlisting determination, it may contact the TSC to discuss the watchlisting status and/or 
submit additional substantive derogatory and identifying information to support its initial 
nomination. 

X. PROCEDURES TO REMOVE AN INDIVIDUAL FROM THE WATCHLIST 

1.62 A NOMINATOR desiring to remove an international ri-RRORlsr identity record previously 
nominated to TIDF, should contact NCTC and provide written justification for the request. 
NC rC will promptly process the request when received. NC TC will be the final arbiter of 
whether the identity is removed from TIDE and TSC will be the final arbiter of whether 
TERRORISI IDENI II-IHRS are removed from TSDB. 
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1 .63 If the NOMINATOR requesting removal of an international TRRKORIs r identity record from 
TIDE is the only NOMiNAlOR to have provided information on that record, the removal request 
will be immediately processed by NCTC. The removal information is then sent to the TSC, 
which, in turn, makes a determination regarding removal of the trrroris i identity from the 
TSDB. 

1 .64 If multiple nominators have provided information on an international l ERRORTST identity 
record, NC I C will coordinate with all relevant parties in an attempt to reach a consensus on 
the l ERRORiS I identity's most appropriate watchlisting status. 

1 .64. 1 If the multiple NOMINATORS arrive at a consensus that the watchlisted identity is not 
reasonably suspected of engaging in I HRRORISM and/or i i:RRORis r AC i ivn iLiS, or an 
applicable exception, the identity is removed from the TSDB and TIDH. In certain 
circumstances, NCTC may retain records in TIDE to prevent inappropriate re- 
watchlisting. 

1 .64.2 If the multiple NOMINAT ORS cannot arrive at a consensus regarding the watchlisting 
status of an identity, TSC may decide to remove the identity from the TSDB, but NCTC 
may retain the identity in TIDE. 

1 .64.3 For cases in which the FBI has conducted an investigation on an individual 
(independently nominated by another NOMINATOR) and has concluded that the 
watchlisted individual is not a known or suspf.ctko tIvRRORISI , the individual may be 
removed from the TSDB.^'' In such cases, the TERRORIST IDEN lll lliRS from the FBI's 
investigation may be used to supplement the TIDE record. 

1 .65 The FBI will review domestic TERRORIS T identity removal requests according to applicable 
I'Bl procedures. 

1 .66 TSC has an established, on-going process to review every record in the TSDB in accordance 
with Paragraph (8)(b) of the TSC MOU and its mission under IISPD-6 to maintain the most 
thorough, accurate, and current information in the TSDB. If TSC: determines that the 
watchlisting standards are not met for an individual record, TSC will remove the record from 
the TSDB, in coordination with the NOMINAIING AGENCY. 

XI. REDRESS PROCEDURES 

1 .67 In January 2005, the TSC established a formal watchli-st redress process that allows Agencies 



After an FBI determination that the individual is not a KNOWN or SUSPECTRD TERRORIST, NCTC may determine- 
bascd on a Nomina ICR's independent nomination- that the individual should remain in TIDE as records that have been 
fully vetted and should not be screened against (TIDli Category Code 140), the individual be watchlisted based upon the 
NOMINATOR'S independent determination that the individual is a known or SUSPECTED tlrroriST or that the individual 
warrants watchlisting based upon an exception to the rhasonablb SUSPICION standard. 
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that use TSDB data during a TLRRORISM screening process to refer individuals' complaints to 
the TSC if it appears the complaints may be related to the watchlisting process. The goal of 
the watchlist redress process is to provide for timely and fair review of individuals' 
complaints and to identify and correct any errors in the TSDB. 

1.68 The watchlist redress process is a multi-Agency process involving the DHS, TSC, NCTC, 
NOMINATORS, and SCRIiMNHRS. On September 19, 2007, Agencies participating in the 
watchlist redress process executed the Redress MOV to set forth a coordinated redress process 
to respond to individual complaints about adverse screening experiences.^^ 

1 .69 TSC's Redress Office is responsible for receiving, tracking, and researching watchlist-related 
complaints that SCRllHNtiRS refer to TSC. For each redress complaint received, the Redress 
Office conducts an in-depth analysis to determine if the person's complaint is related to a 
TSDB record, including a determination of whether the complainant is the watchlisted 
individual or merely a near-match to a watchlist record. If the complainant is the watchlisted 
individual, the TSC's Redress Office will determine whether the watchlisted individual still 
meets all the watchlisting criteria. 

1.70 For each complaint, the TSC Redress Office coordinates with the NOMINATOR (via NCTC 
when the nominator is not the FBI), who assists in the evaluation of the complaint to ensure 
the most current, accurate, and thorough information available is used to review the person's 
watchlist status. Where appropriate and warranted by the current information and applicable 
criteria, a person's watchlist status may be adjusted {e.g., downgraded from the No Fly to 
Selectee List or the person's identity may be removed entirely from the TSDB). If the redress 
complaint was referred to the TSC from the DI IS Traveler Redress Inquiry Program (DHS 
TRIP), the individual's adjusted watchlist status will be provided to DHS TRIP for issuance of 
an appropriate response. 

1 .71 DHS TRIP is a single point of contact for individuals who have inquiries or seek resolution 
regarding difficulties they experience during their travel screening or inspection at, for 
example, transportation hubs like airports, or when crossing U.S. borders. The DHS TRIP 
website is www.dhs.gov/trip . DHS f RIP ensures a thorough review is completed by 
consulting and sharing information with other DHS Components and other Agencies, as 
appropriate, to address the issues identified by the complainant. 

XII. PERIODIC REVIEW OF THE WATCHLISTING GUIDANCE 

1 .72 This Watchlisting Guidance shall be reviewed no less than every two years following the 
conclusion of the previous review, or as needed. 



^ See Appendix 8, Redress MOU; see also FN 16, supra. 
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CHAPTER 2: MINIMUM IDENTIFYING CRITERIA 



I. BIOMETRIC NOMINATIONS 



2.1 Biometric information refers to the measurable biological (anatomical or physiological) and 
behavioral characteristics that can be used for recognition. Examples include facial 
photographs, fingerprints, iris scans, digital images, latent prints, DNA and gait. A biometric 
is sufficient to meet the minimum identifying criteria for nominations to the NCTC's TIDE 
and/or the TSC's TSDB, provided that the nomination also meets the minimum substantive 
derogatory criteria, or one of the exceptions. Biometric nominations without minimum 
biographic information will be provided only to those SCRRHNERS that have the technical 
capability to screen against or otherwise make assessments using the biometrics. 
Notwithstanding the above, all NOMINATORS are encouraged to include all available associated 
biographic information with any biometric nomination. 

II. MINIMUM BIOGRAPHIC NOMINATION REQUIREMENT 



2.2 TIDE. NOMINATORS shall provide NC I C, for inclusion into TIDE, FRAGMliN tary 

INFORMATION that suggests an individual may have a nexus to TERRORISM and/or TERRORIST 
ACTlvri'lES and any additional information that will facilitate identification of these 
individuals. Nominations to TIDE under this section will be considered for inclusion in the 
TSDB if the NOMINATING AGENCY believes there is REASONABLE SUSPICION to believe that the 
individual is a KNOWN or SUSPECTED TERRORIST. 



2.2.1 Nominations of individuals based on FRAGMENTARY INFORMATION who fail to meet the 
minimum identifying criteria for nomination to TSDB should be provided to NCTC for 
inclusion in 11 DE when there is DIvROGA IORY INFORMATION suggesting that the 
individual is associated with TERRORISM and the NOMINATING AGENCY determines that 
there are sufficient identifiers for possibly facilitating a match to existing TIDE records. 
Unless otherwise directed, NOMINA l lNG AGENCIES should prioritize the nominations of 
individuals who satisfy the minimum identifying criteria before addressing nominations 
based on FRAGMENTARY INFORMA riON. 



2.3 SCRKENKR Discretion. As appropriate, SCREENERS have the discretion to decide not to 
include in their screening systems common names received from the TSDB, where 
insufficient identifying information exists for identification. 

2.4 TSDB. Nominations to the TSDB must include a last name, nominating AGENCIES should 
also provide any additional identifying information available. In addition to a last name, 
nominations must include: 

2.4. 1 first name; 
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2.4.2 Or any one of the following additional identifiers: 

2.4.2. 1 Full date of birth (eight digit "mm/dd/yyyy" format); 

2.4.2.2 Passport number (with or without country of issuance); 

2.4.2.3 Unique identifying numbers such as alien registration numbers, visa numbers, 
and social security numbers; 

2.4.2.4 Telephone number(s)^^; 

2.4.2.5 B-mail address(es)"; 

2.4.2.6 I ,icense plate number(s). 

TO 

2.4.3 Or any two of the following additional identifiers : 

2.4.3.1 Country of citizenship, if different from place of birth; 

2.4.3.2 Place of birth (city or country), if different from country of citizenship; 

2.4.3.3 Circa or partial date of birth (partial: e.g., 1960; or range: e.g., 1960-1965); 

2.4.3.4 Full name of an immediate family member (e.g., parent, spouse, sibling, or 
children); 

2.4.3.5 Occupation or current employer; 

2.4.3.6 Specific degrees received; 

2.4.3.7 Schools attended; 

2.4.3.8 Physical identifiers such as race, height, or weight; 

2.4.3.9 Unique physical identifiers such as scars, marks or tattoos; 

2.4.3. 1 0 Street address or other sufficiently specific location information. 



Only unclassified phone numbers that are authorized for passage to I SC pursuant to Paragraph 7(m) of Addendum 13 
to the TSC MOU, will be included in TSDB. See Appendix 4. Unclassified phone numbers will only be provided to 
those SCRI;i;ni;rs that have the technical capability to receive this data. 

" Only unclassified email addresses that are authorized for passage to TSC pursuant to Paragraph 7(m) of Addendum B 
of the TSC MOU will be included in TSDB. See Appendix 4. Unclassified email addresses will only be provided to 
those SCRF.nNr.RS that have the technical capability to receive this data. 

As required here, there must be two distinct identifiers that must be sufficiently specific to account for the large 
number of possible matches common identifiers may produce. For example, if one identifier is rather common (e.g., 
physical identifiers), the other identifier must be more specific to permit the screening official to successfully match a 
record with an individual. As a further example, a nomination with the last name listed as Khan, location listed as 
Kabul, Afghanistan, and occupation listed as a baker alone would be insufficient for screening purposes because it is 
highly unlikely a successful match could be made against such data. However, a nomination with the name listed as R. 
Khan, location listed as residence of 123 Sunshine Street, Kabul, Afghanistan, and occupation listed as a baker at ABC 
Bakery, would be sufficient for screening purposes. 
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III. MINIMUM BIOGRAPHIC INFORMATION REQUIRED FOR EXCEPTIONS TO THE 
MINIMUM SUBSTANTIVE DEROGATORY STANDARDS FOR TERRORIST 
WATCIILISTING 

2.5 There are certain exceptions to the minimum substantive derogatory standards for TERRORIST 
watchlisting that support immigration and visa screening activities by DUS and DOS.^' 
Examples of" these categories of records include, but may not be limited to, records relating to 
an individual who has a defined relationship with the known or suspeCH;d I i-;rrorist, but 
whose involvement with the KNOWN or SUSPECTED TERRORIST'S activities is unknown (TIDE 
Category Code 50) and those with insufficient di;rogatory ini ormai'ION io meet the 
REASONABLE SUSPICION Standard for watchlisting (TIDE Category Code 99). 

2.6 NOMINATING AGENCIES should provide all additional identifying information available. All 
nominations under this section must include a full name (first name, last name) and one of 
the following identifiers: 

2.6.1 Full date of birth; 

2.6.2 Full passport number (with or without country of issuance); 

2.6.3 Unique identifying numbers such as alien registration numbers, visa numbers, and social 
security account numbers; 

2.6.4 Telephone number(s); 

2.6.5 Email address(es); 

2.6.6 License plate numbcr(.s); 

2.6.7 Biometrics, such as facial image, iris scans or fingerprints. 



See Chapter 3, Section V. 
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CHAPTER 3: MINIMUM SUBSTANTIVE DEROGATORY CRITERIA 
I. INTRODUCTION AND PURPOSE 

3.1 TSC issued an updated U.S. Government Protocol Regarding Terrorist Nominations on 
February 25, 2009, tiiat included an appendix identifying tiie minimum substantive derogatory 
criteria for acceptance of known or suspf.ctrd l iiRRORlST nominations into the TSDB. 
Based on the attempted terror attack of December 25, 2009, the Walchlisting Guidance was 
reviewed to determine whether adjustments were needed. The revised guidance was approved 
by the White IIou.sc Deputies Committee on May 25, 2010 and issued to the watchlisting 
community on July 16, 2010, after a multi-agency classification review. 

3.2 This Chapter of the Watchlisting Guidance has been updated to reflect the watchlisting 
community's experiences with the Guidance since issuance in July of 2010 by the Deputies 
Committee. One of the more notable changes of this updated version of the Watchlisting 
Guidance is the restructuring of instances for when particularized derogatory 
INFORMA I ION is required. Another notable change includes the re-introduction of guidance 
relative to the TliRRORlST facilitators or supporters from an earlier version of the Watchlisting 
Guidance and the inclusion of additional exceptions to the minimum substantive derogatory 
standards for rilRRORlST watchlisting that support immigration and visa screening activities of 
the DOS and DHS. 

II. REASONABLE SUSPICION 

3.3 For purposes of watchlisting an individual to the TSDB, the NOMINA TOR should determine 
whether there is REASONABLE SUSPICION that an individual is a KNOWN or SUSPECTED 
TERRORIST.''^ 

3.4 REA.SONABI.E SU.SPiciON. To meet the reasonable SUSPICION standard, the nomina tor, 
based on the totality of the circumstances, must rely upon articulable intelligence or 
information which, taken together with rational inferences from those facts, reasonably 
warrants a determination that an individual is known or suspected to be or has been knowingly 
engaged in conduct constituting, in preparation for, in aid of, or related to Tl-RRORISM and/or 
terrorist activities. There must be an objective factual basis for the NOMINATOR to believe 
that the individual is a KNOWN or SUSPi;CTED TERRORIST. Mere guesses or hunches arc not 
sufficient to constitute a reasonable SUSPICION that an individual is a known or SUSPECTED 
TERRORIST. Reporting of suspicious activity alone that does not meet the reasonable 
SUSPICION .standard set forth herein is not a sufficient basis to watchlist an individual. The 
facts, however, given fair consideration, should sensibly lead to the conclusion that an 
individual is, or has, engaged in TERRORISM and/or terroris i activities. 



In instances where rhasonahi.i; SUSPICION is not found, NOMINATORS should also determine whether the individual 
should be nominated to support immigration and visa screening by DHS and DOS (see Chapter 3, Section V). 
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3.5 Due Weight. In determining whether a RHASONABlJi SUSPICION exists, due weight should be 
given to the specific reasonable inferences that a nominator is entitled to draw from the facts 
in light of his/her experience and not on unfounded suspicions or hunches. Although 
irrefutable evidence or concrete facts are not necessary, to be reasonable, suspicion should be 
as clear and as fully developed as circumstances permit. For additional guidance regarding 
the nomination of U.S. PI-:rsons, see Paragraph 3.15. 

3.6 nominators shall not nominate an individual based on source reporting that NOMINATING 
personnel identify as, or know to be, unreliable or not credible. Single source information, 
including but not limited to "walk-in", "write-in", or postings on social media sites, however, 
should not automatically be discounted merely because of the manner in which it was 
received. Instead, the NOMINATING AGENCY should evaluate the credibility of the source, as 
well as the nature and specificity of the information, and nominate even if that source is 
uncorroborated, assuming the information supports a reasonable suspicion that the 
individual is a KNOWN or SUSPbCl ED TERRORIST or there is another basis for watchlisting the 
individual. 

3.7 Criteria and Data Quality. To demonstrate that the nomination has sufficient indicia of 
reliability to support a REASONABLE SUSPICION determination, nominating agencies should 
incorporate processes designed to ensure that nominations are free of errors, and to the extent 
possible given the nature of the reporting, have not come from sources known or determined 
to be unreliable, nominating agi;ncies should, to the extent possible, verify the accuracy 
and reliability of the information included in nominations. In addition to ensuring that 
nominations are free from errors, NOMINA riNG AGENCIES should implement procedures 
designed to ensure that recalled or revised information is reviewed regularly, and that 
necessary corrections to nominations based on those revisions/retractions are made. 

3.8 PAR'I ICULARIZED DKROCA I ORY INKORMA I ION. PARTICULARIZED DEROGATORY 

INFORMATION is the type of information relied on to determine whether reasonable 
SUSPICION is met. I'his is information that demonstrates the nature of an individual's or 
group's association with TERRORISM and/or terrorist activi iies that is descriptive and 
specific to an event or activity, and is more than a label. For example, "Subject X provides 
false travel documentation for Al-Qaida operatives" is particularized DEROGATORY 
INFORMATION, whereas "Subject Y is a supporter," standing alone, is not considered 
particularized DEROGATORY INFORMA PION. 

3.9 Potential Behavioral Indicators. In making a Ri:asonable SUSPICION determination, 
NOMINATORS should consider behavioral indicators known to be associated with particular 
KNOWN or SUSPECTED TERRORISTS. The following is a list of a few examples of those 
indicators. It is not an exclusive list and it includes activity that may have innocent 
explanations wholly unrelated to terrorism. I'urthermore, some activities conducted by U.S. 
PERSONS or activities taking place within the United Slates, may be an exercise of rights 
guaranteed by the First Amendment. Watchlisting an individual for engaging solely in 
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constitutionally protected activities is prohibited.'" For these reasons, it is critical that each of 
these activities — as with all possible indicators of I liRRORlST ACTIVITY — not be judged in 
isolation. Each must be viewed in the context in which it occurs and considered in 
combination with all other known information to ensure that any nomination based in whole 
or in part on this behavior comports with the standards set forth above: 

3.9. 1 Attendance at training camps known to the IC as facilitating thrrorist activities'*^; 

3.9.2 Attendance at schools/institutions identified by the IC as teaching an ideology that 
includes the justification of the unlawful use of violence or violent extremism; 

3.9.3 Repeated contact with individuals identified by the IC as teaching or espousing an 
ideology that includes the justification of the unlawful use of violence or violent 
extremism; or, 

3.9.4 I ravel for no known lawful or legitimate purpose to a locus of l ERRORIST ACTIVITY. 
III. KNOWN TERRORISTS 

3.10 Definitions. 

3.10.1 KNOWN TERRORIST. A KNOWN TRRRORIST is an individual whom the U.S. 
Government knows is engaged, has been engaged, or who intends to engage in 
TERRORISM and/or terrorist activity, including an individual (a) who has been 
charged, arrested, indicted, or convicted for a crime related to i krrorism by U.S. 
Government or foreign government authorities; or (b) identified as a 1 ERRORIST or 
member of a designated foreign terrorist organization pursuant to statute, Executive 
Order or international legal obligation pursuant to a United Nations Security Council 
Resolution. 

3. 1 0.2 TERRORISM and/or TERRORIS 1 ACTIVI ITES. In general, TERRORISM and/or 
TRRRORIST ACTIVITIES are acts that: (a) involve violent acts or acts dangerous to human 
life, property, or infrastructure that may be a violation of U.S. law, or may have been, if 
those acts were committed in the United States; and, (b) appear intended to intimidate or 
coerce a civilian population, influence the policy of a government by intimidation or 
coercion, or affect the conduct of government by mass destruction, assassination, 
kidnapping, or hostage-taking. Phis includes activities that facilitate or support 



*' See Chapter 1 , Section III. 

*^ Attendance at TiiRRORiST training camps alone meets the RliASONABl.i; SUSPICION standard. Note that under the INA 
section 212 (a)(3)(BXi)(VlIl)|8 U.S.C. 1 182(a)(3)(B)(i)(VlII)], an alien who has received militaty-type training (as 
defined in section 2339D(c)( 1 ) of Title 1 8, United States Code) from or on behalf of any organization that, at the time 
the training was received, was a terrorist organization as defined in clause (vi), is inadmissible. Note also that 18 U.S.C. 
section 23390 criminalizes receiving military type training from a designated foreign terrorist organization. 
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TERRORISM and/or TliRRORlST ACTIVITIES. 



3.11 Types of KNOWN TERRORISTS for Whom rkasonablk suspicion is Established by 
Recognized Authority and for Whom Particularized Derogatory Information is Not 
Required. 

3.11.1 Arrested or Convicted TERRORISTS."*'' Individuals who have been arrested or 
convicted for TliRRORlST ACTIVI I Y arc considered KNOWN TERRORISTS who should be 
nominated. The arrest or conviction is presumed to meet the ri;asonable suspicion 
standard for watchlisting unless there is reason to believe that the information is 
questionable (e.g., faulty or erroneous), of dubious origin (e.g., poison pen, source 
known to be unreliable, or politically motivated) or the result of an unreliable process 
(e.g., conviction by a court that docs not adhere to minimally acceptable due process 
standards). Nominations should include the charge, location, and date of the arrest or 
conviction, if available. 

3.1 1 .2 Individuals Idcntifled Pursuant to Statute or Executive Order. Pursuant to 
Executive Order 13224, as amended, "Blocking Property and Prohibiting Transactions 
with Persons who Commit, Threaten to Commit, or Support Terrorism," Executive 
Order 12947, as amended, "Prohibiting Transactions with Terrorists Who Threaten to 
Disrupt the Middle East Peace Process," and section 302 of the Antiterrorism and 
Effective Death Penalty Act of 1996 (AEDPA), the U.S. Department of the Treasury's 
Office of Foreign Assets Control (OI'AC) publishes, updates, and maintains an 
integrated and comprehensive list of designated parties with whom U.S. PERSONS are 
prohibited from providing services or conducting transactions and whose assets are 
blocked. The names on this list include persons designated under country-based and 
list-based economic sanctions programs, as well as individuals and entities designated 
under the various Executive Orders and Statutes aimed at I ERRORISM. Persons 
designated under Executive Order 13224, Executive Order 12947, or the AEDPA are 
included on this integrated and comprehensive li.st and are 'Specially Designated Global 
Terrorists' (SDGTs), 'Specially Designated Terrorists' (SDTs), or 'Foreign Terrorist 



TKRRORISM and/or i iiRUORiS l ACTiviTii:s include acts that the actor knows or reasonably should know affords 
material support to any individual who the actor knows or reasonably should know, has committed or plans to commit a 
terrorist activity, to a terrorist organization or to any member of such an organization. Material support includes 
providing a safe house, transportation, communications, funds, transfer of funds or other material benefit, false 
documentation or identification, weapons (including chemical, biological, or radiological weapons), explosives, or 
training for the commission of an act of liiRRORlSM and/or ri;RRORis i ACi iviiY. 

See Paragraph 3.13.1 for situations involving individuals who are acquitted or again.st whom charges are dismissed 
for a crime related to l iiRRORlSM. 

These authorities generally authorize the Secretary of State (in consultation with either the Secretary of the Treasury, 
the Attorney General, the Secretary of Homeland Security, or a combination thereof) to designate and block the assets 
of foreign individuals and entities that commit, or pose a significant risk of committing, acts of i liRRORlSM that threaten 
the security of U.S. nationals or the national security, foreign policy, or economy of the United States. Additionally, 
leaders or members of a Foreign Terrorist Organization (FTO), an Specially Designated Global Terrorist (SDGT) under 
Executive Order 1 3224, or an organization named to the Teirorist Exclusion List (TEL) may be designated as a terrorist 
organization by the Secretary of State for immigration purposes pursuant to INA section 2 12(a)(3)(B)(vi)(lI) [8 U.S.C. 
I189(a)(3)(B)(vi)(II)]. 
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Organizations' (FTOs), respectively, and should be nominated accordingly. 
NOMINATORS should regularly check the Specially Designated Nationals List (SDNL) as 
individuals are added and dropped as new information becomes available. 

3. 11. 3 Individuals Identified as terrorists Pursuant to a United Nations Security 
Council Resolutions (UNSCR) Concerning Al-Qaida and Associated Individuals 
and Entities. Under UNSCR resolution 1267 (1999), modified and strengthened by 
subsequent resolutions, including resolutions 1333 (2000), 1390 (2002), 1445 (2003), 
1526 (2004), 1617 (2005), 1735 (2006), 1822 (2008), 1904 (2009), and resolution 1989 
(201 1), sanctions measures now apply to designated individuals and entities associated 
with Al-Qaida, wherever located. The names of the targeted individuals and entities are 
placed on the Al-Qaida Sanctions List.'*'' Under the UNSCR sanctions regime, the 
United States has an international legal obligation to prevent the entry into or transit 
through its territory of designated individuals listed on the Al-Qaida Sanctions List.'"' 
NOMINA I ORS should regularly check the Al-Qaida Sanctions List as individuals are 
added and dropped as new information becomes available. 

3. 1 1 .4 Individuals Identified as terrorists Pursuant to the National Intelligence 
Priorities Framework orCounterterrorism. Members of groups (not support entities) 
that are identified on the National Intelligence Priorities Framework of 
Counterterrorism, (NIPF-C T) are presumed to meet the RF.ASONABIJ-: SUSPICION standard 
so long as the group name is not just a regional or activity-based characterization. 
Neutral associations such as janitorial, repair, or delivery services of commercial goods 
do not meet the RKASONABLE SUSPICION standard. 

IV. SUSPECTED TERRORISTS 

3.12 Definition. 

3.12.1 A SUSPiiCTiiD TERRORIST is an individual who is reasonably SUSPEC TED to be, or 
has been, engaged in conduct constituting, in preparation for, in aid of, or related to 
TERRORISM and/or TERRORIST ACTIVITIES based on an articulable and reasonable 

SUSPICION. 

3.13 Types of SUSPECTED terrorists. 



The comprehensive list of SDG Ts and SDTs is accessible through the OFAC website at the following URL: 
hltp://www. treasurv.gov/resourcc-ccntcr/sanctions/SDN-List/Pimcs/default.aspx 

Narrative summaries of the reasons for listing individuals, groups, undeilakings and entities on the Al-Qaida 
Sanctions List (where available) can be found at the following URL: 
http://www.un.oriz/sc/committccs/ 1 267/narrativc.slitml. 

Many persons designated under UNSCR 1267 and Executive Order 13224 are or have been engaged in financial 
support, facilitation, and other activitie'i in support of n;RRORISM. They often, however, do not meet the current criteria 
for placement on the No Fly List. DI IS and DOS will review the information provided about these individuals and take 
actions, as appropriate. 
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3. 1 3. 1 Individuals Who are Acquitted or for Whom Charges are Dismissed. An 

individual who is acquitted or against whom charges arc dismissed for a crime related to 
TERRORISM may nevertheless meet the ri:asonabl[; suspicion standard and 
appropriately remain on, or be nominated to, the Terrorist Watchlist.''' Each case should 
be evaluated based on the facts of the underlying activities, the circumstances 
surrounding the acquittal or dismissal, and all known di;rogatory iNroRMATiON to 
determine if the individual should remain on the t errorist Watchlist. 

3. 1 3.2 Individuals Identified as TERRORISTS Pursuant to Other Internal Department or 

Agency Processes. Departments or Agencies that nominate individuals associated with 
a terrorist group that is not designated by Statute or Executive Order (see Paragraph 
3.1 1.2) or groups that fall outside of the N I PF-CT construct (see Paragraph 3.1 1.4) must 
have internal processes to review the activities of TlvRRORlSTS and terrorist 
organizations. So long as a Department's or Agency's internal process has determined 
that a group is engaging in ti;rrorism and/or ti;rrorist activities, ri;asonabi.i- 
SUSPICION can be met for members of the group, or active participants in, that group's 
•I HRRORIST ACTlvn iiiS. Departments and Agencies that use this clause to recommend 
subjects for watchlisting are required to provide written notice to NCTC and TSC (an 
email will suffice) of the Department or Agency's determination. While members or 
active participants of such groups may be nominated without PARTICULARIZED 
DEROGATORY INFORMATION, the watchlisting of an individual pursuant to this clause 
must be based on the determination by a Department or Agency's internal processes that 
the group is engaging in tfrrowsm and/or terrorist ACTivn n:s. Neutral associations 
like janitorial, repair, or delivery services of commercial goods do not meet the 
REASONABLE SUSPICION standard. 

3.13.3 Individuals Identified as terrorists Pursuant to Agreements by U.S. 
Government Agencies/Foreign Governments for Sharing of i errorist Identity 
Data. The U.S. Government may enter into agreements with foreign governments for 
the sharing of i errorist identity information. Pursuant to such agreements data will 
be provided to the TSC for TERRORIST screening, as required under HSPD-6. The 
Information Sharing and Access (ISA) Interagency Policy Committee (IPC) or an IPC- 
designated interagency body, will make a determination, country by country prior to the 
final agreement on whether the data provided will (1) be presumed to meet the standard 
for inclusion m TSDB; or (2) undergo the Foreign Partner Vetting Process. 

3. 1 3.4 Individuals Identified as Associates or Affiliates of known or suspkcpfd 
TERRORISTS or TERRORIST Cells or Networks.'" Individuals who are associated or 
aniliated with a known or suspected terrorist, or tiirrorist cells or networks 
should be nominated when there is PARTICULARIZED DEROGATORY INFORMATION 



4" i~» 

Because the RHASONABLi-: suspicion standard required for watchlisting is lower than that required for a criminal 

Zu^T ^" '^'T' u '"T"'""' ^ ^'='1"'"'^ -hom charges arc dismiss"" may 

quahiy for watchhstmg based on the facts and circumstances surrounding the acquittal or dismissal 
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regarding the context of the relationship that gives rise to a RRasonable suspicion that 
the individual is engaging or has engaged in conduct constituting, in preparation for in 
aid of, or related to TLRRORISM and/or i iirrorisi ACf i vn ies. Neutral associations such 
as janitorial, repair, or delivery services of commercial goods are not sufficient 
Information about the pertinent activities of the KNOWN or SUSPliCTFD TERRORIST 
ITRRORIST cell or network should be included in the nomination. These nominations 
should include context or content to demonstrate the membership, association or 
affiliation to the known or suspected terrorist, terrorist cell or network' 
Individuals who merely "may be" members, associates or affiliates to a terrorist 
organization may not be accepted into the I SDB, unless the REASONABLE SUSPIC ION 
standard is met and particularized DEROOATORY ineormation accompanies the 
nomination. 

3.13.4.1 Inferences that Support rkasonabi,k suspicion, reasonable suspicion 
may be rationally inferred from the context of the relationship with the known or 
suspected terrorist. The following factors should be considered when 
determining whether reasonable suspicion may be inferred: 

3. 1 3.4. 1 . 1 The nature of the activity engaged in with the KNOWN or SUSPECTED 
terrorist; 

3.13.4.1 .2 The frequency, duration, or manner of their contact; 

3.13.4.1.3 Aclose, continuing, or direct relationship with a KNOWN or 
SUSPECTED TERRORIST that reasonably suggests the individual is knowingly 
involved in or willfully supporting the known or SUSPECTED TERRORis r'S 
TERRORIST ACTIVITIES; or, 

3.13.4.1.4 Other malevolent or illicit factors that can be articulated that would 
support a REASONABLE SUSPICION that the individual is engaging in 
TERRORISM and/or terrorist ACTIVITIES. 

3. 1 3.5 Individuals Identified as terrorist Facilitators. TERRORIST facilitators arc 

presumed to meet the reasonable suspicion standard. The nomination should include 
PAR11CU1.AR1ZED DEROGATORY INEORMAI ION concerning the type of "facilitation" 
involved and the role of the facilitator when this information is known. Individuals who 
are considered facilitators include, but are not limited to, financial fundraisers, document 
forgers, travel facilitators, money launderers, and arms merchants. There must be 
REASONABLE SUSPICION that the facilitator knew that his or her actions would aid in the 
furtherance of TERRORISM and/or l ERRORlST ACTIVITIES. 

3.13.5.1 Criminal Activity Supporting TERRORISM. If intelligence or information 
indicates that the individual is engaging in criminal activity related to smuggling, 
providing safe houses, forging documents, or any other support to TERRORISTS or 
terrorist groups, NOMINATORS should presume that the individual is knowingly 
engaging in criminal activity that supports lERRORlSM and/ or terrorist 
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ACTIVITIES. In these circumstances, REASONABLE SUSPICION is based on the 
TERRORIS I criminal activity and should be described in the nomination. 

3.13.6 Individuals who Incite Others to Commit Acts of terrorism.^' Inciting an 
individual to commit an act of TERRORISM and/or TERRORIST ACTIVITIES under 
circumstances that indicate an intention to cause death or serious bodily harm is 
considered engaging in TERRORIS I activi ty and is sufficient to meet the REASONABLE 
SUSPICION standard. The nomination should include par i icularized derogatory 
INI-ORMA I ION concerning the type of "incitement" involved and the role of the 
individual when this information is known. Normally, speech will not rise to the level of 
"inciting" unless there is a clear link between the speech and an actual effort to 
undertake the TERRORIST activity. The individual may have incited TERRORIST 
ACnvri Y, even if a terrorist attack docs not actually occur (e.g., because an attempt to 
commit such activity is thwarted). Speech advocating a violent or dangerous l liRRORlS r 
ACTIVI l Y is incitement if such advocacy is directed to inciting or producing imminent 
lawless action and is likely to incite or produce such action. 

3.13.7 Individuals Who Solicit Others to Engage in terrorist activities. In an 

individual capacity or as a member of an organization, any individual who solicits 
another to engage in a TERRORIST ACTIVITY and/or for membership in a terrorist 
organization is considered to be engaging in TERRORIST ACTIVITY. Nominations that 
include par ticularized deroga tory information concerning the type of solicitation 
involved and the role of the individual are sufficient to meet the REASONABLE; SUSPICION 
standard. An individual may fall outside the scope of engaging in the solicitation of an 
individual for membership in a terrorist organization if there is information that 
demonstrates that the individual did not know and should not have reasonably known 
that the organization was a terrorist organization. 

3.13.8 Individuals Identified as Sympathizers and Supporters of a Designated Terrorist 
Organization.' Sympathizers and supporters of a designated terrorist organization 
(DTO) (see Paragraph 3.1 1.2) may be watchlisted when the ri-asonable SUSPICION 
standard is met, and the nomination includes PARTICULARIZED DEROGAIORY 
INFORMATION concerning the how the individual's activities warrant watchlisting, as 
opposed to information about why the organization is a DTO. 

3.13.8. 1 A sympathizer or .supporter of terrorism should be nominated if the support 
is operational in nature. If support is merely ideological, the individual should not 
be nominated. 



^' For situations where there is no PAR ncULARlZRD I)i;roC}ATORY INI ORMATION, individuals may be watchlisted as an 
exception to the RLASONABLF. SUSI'ICION standard. See Paragraph 3. 1 4.3. 

" Ashcroft V. Free Speech Coalition, 535 U.S. 234, 1 22 S.Ct. 1 389 (2002); 9 FAM 40.32 N2.5, "Advocacy of Terrorism 
Not Always F.xclusionary." 

For situations where there is no par ticularized DEROGATORY INFORMATION, supporters of a designated terrorist 
organization (DTO) may be watchlisted as an exception to the REASONABLE SUSPICION standard. See Paragraph 3.14.4. 
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3. 1 3.9 Individuals Identiflcd as foreign hchters. I ori;ign i igi iti:rs are defined as 
nationals of one country who travel or attempt to travel to another country to participate 
in TERRORISM and/or TERRORIST ACTiVlTll'S, and to the extent possible, the nomination 
should include PARTICULARIZED DEROGATORY INI'ORMATION. Behavior that qualilles as 
PARTICULARIZED DEROGATORY INFORMA TION is the travel to a foreign country to 
participate in i iiRRORiSM and/or 7 i;rrorist activities. 

3.13.9.1 A person is not considered a I-OREIGN FIGHTER when he or she traveled From 
Country A to Country B for non-TERRORlST reasons (e.g.. enrolling in school). 
Inferences that someone is a FOREIGN i kjihi:r may not be drawn solely from 
biographic facts that indicate a person was born in one country and is found in a 
different country and suspected to be participating in TERRORISM and/or l ERRORlST 
ACTIVITIES. 

3.13.10 Special Consideration for Individuals Involved with i KRRORisT-Associated 
Weapons. Individuals who possess, handle, use, manufacture, sell, or transfer 
Improvised Explosive Devices (IRDs), Explosively Formed Penetrators (EFP), 
Radiological Dispersion Devices (RDD), or improvised chemical, biological, 
radiological, or nuclear (CBRN) devices, are presumed to meet the reasonablI': 
SUSPICION standard due to the inherently dangerous nature of these items or when it can 
reasonably be inferred from the context that there is a connection to terrorism and/or 
TERRORIS T ACTIVITIES (e.g., Iraq, presence of other known or SUSPECTI;d terrorists, 
previous attacks on or threats to U.S. Forces). 

3. 1 3.1 1 Targets of Raids Conducted by the U.S. Military or the Intelligence 
Community. REASONABLE; SUSPICION is presumed where an individual was identified as 
the target of a raid to disrupt a FTC. When an individual is identified by discovery of 
information found during the course of such a raid conducted by the U.S. Military or the 
IC, however, REASONABLE SUSPICION is met where the available particularized 
derogatory informa HON explains why he or she can be reasonably suspected of 
engaging or having engaged in conduct constituting, in preparation for, in aid of or 
related to terrorism and/or TERRORIST activity. If there is no PARTICULARIZED 
DEROGA TORY INFORMATION on the individual for whom information was discovered 
during the raid, he or she should not be nominated. 

3.13.12 Individuals Identified as TERRORISTS via Documentation or Media Exploitation 
Efforts. Any individuals identified in documents or media otherwise captured by U.S. 
or allied forces or obtained from a nominating agency must have a connection to 
TERRORISM and/or TERRORIST ACTIVITIES in order to be nominated to the Terrorist 
Watchlist. Ri'ASONABLE SUSPICION for an individual to be nominated from document 
and media exploitation (DOMEX) materials may be established either by the content or 
context of the DOMEX, or other sources. Nominations under this section must include 
PAR TICULARIZED DEROGATORY INFORMATION. For example, REASONABLE SUSPICION for 
watchlisting can be met based on the acquisition of documents/media identifying a 
person from the counterterrorism operation that targeted the residence of Al-Qaida 
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leader Usama bin Laden on May 2, 201 1 .^^ Likewise, individuals listed on a roster of an 
lED cell could be nominated solely on the presence of their name on the list. An 
identity from a captured passport, however, would only be watchlisted if additional 
reporting documents reasonable suspicion to believe that the individual is connected 
to TERRORISM and/or 'l ERRORJST ACTIVITY. 

3.13.13 LONK WOLVKS. Because the focus is on the individual's TERRORiSM-related conduct, 
"LONE WOLF" TERRORISTS should be nominated when PARTICULARIZED DliROGA roRY 
INFORMA I ION and their actions support a REASONABLE SUSPICION that they are engaged 
in, or have engaged in, TI-rkorism and/or terroris r AC'l ivn iES. No present known 
affiliation with a terror group, organization, or cell is required but prior alFiliations, if 
they exist, may be taken into account for supporting a rational inference that the 
individual is reasonably suspected of engaging in TERRORISM and/or TERRORIST 
AcnvriiES. 

V. EXCEP HONS ro support immigration and visa screening 

ACTIVITIES BY DIIS AND DOS 

3.14 TSDB Minimum Substantive Derogatory Exceptions to Support Immigration and Visa 
Screening Activities by the I)HS and DOS. The Watchlisting Guidance contains certain 
exceptions to the minimum substantive derogatory criteria for TiiRRORiST watchlisting that 
support immigration and visa screening activities by the DHS and DOS to determine whether 
grounds exist to deny admission of aliens to the United States (including denials of visas) or to 
deny other immigration benefits pursuant to the INA.'^'^ particularized deroga tory 
INFORMA TION is not required for nominations made pursuant to the following sections. 
Because the INA defines "aliens" as "any person not a citi/en or national of the United 
States"" , the INA admissibility provisions also apply to LPRs, in certain circumstances 
including those described in INA section 10l(a)(13)(C)[8 U.S.C. I I01(a)(13)(C)], who are 
considered as U.S. persons under Executive Order 12333. Consequently, NCTC developed a 
mechanism in TIDE to identify and distinguish U.S. citizens from non-U. S. citizens in order 
to further distinguish between "aliens" under the INA and U.S. persons under Executive 
Order 12333. The following subsections are exceptions to the REASONABLE SUSPICION 
standard and will only be transmitted to DOS's CLASS (via the DOS CCD) and DI IS's WLS 
to support immigration and visa screening processes. 



Such documenls/mcdia, however, still need to be reviewed to ensure that innocent individuals are not erroneously 
watchlisted. 

" INA .section 212(a)(3XB)[8 U.S.C. I l82(a)(3)(B)l sets forth several grounds for inadmissibility based on terrorist 
activities, which is defined in INA section 212(a)(3XB)(iii)l8 U.S.C. 1 182(aX3)(BXiii)]. For example, INA section 
212(aX3)(BXiXVII) states that any alien who "endorses or espouses terrorist activity or persuades others to endorse or 
espouse terrorist activity or support a terrorist organization" is inadmissible to the United States. 8 U.S.C. 
1 182(aX3XBXiXVn)l. All other uses of the term "terrorist activities" within this Watchlisting Guidance that do not 
specifically reference the INA follow the definition outlined in Chapter 1 and Appendix 1. 
See INA § l01(aX3)[8 U.S.C. 1101(aX3)]. 
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3.14.1 Spouses and Children. Spouses and children" of a KNOWN or SUSPECTED alien 

TERRORIST cannot be considered TERRORISTS without a ri:asonabi.e suspicion that they 
arc engaging or have engaged in conduct constituting, in preparation for, in aid of, or 
related to TERRORISM and/or l liRRORlST AC riviTlES.^ The INA provides that the alien 
spouse or alien child of an alien who is inadmissible for certain specified reasons 
relating to terrorist activities, if the activity causing the alien to be found inadmissible 
occurred within the last five (5) years, is inadmissible.^^ An alien spouse or child of an 
alien who is believed to be inadmissible under the INA for terrorist activities should be 
nominated. No additional di:rogatory ini ormation (in addition to familial relation) 
is required for nomination under this section, if the individual meets the below 
qualifications. 

3.14.1 .1 To qualify for watchlisting, alien spou.ses and children of a KNOWN or 
SUSPECTED lERRORISr must: 

3.14.1.1.1 Be an alien (not a U.S. citizen or national), which includes LPRs; and, 

3.14.1 . 1 .2 Be an unmarried child under the age of 21 or a spouse of an alien. 

3.14.1 .2 Ex-spouses, widows, or widowers should not be nominated unless there is a 
RI'ASONABLE SUSPICION to believe that they themselves are engaging or have 
engaged in conduct constituting, in preparation for, in aid of, or related to 
TERRORISM and/or TERRORIST ACTIVITIES. Deceased spouses should not be 
nominated unless they are specifically covered in Paragraph 3.17. 

3. 1 4. 1 .3 Once a spouse or child no longer meets the definitional requirements under 
this section, such an individual should no longer be watchlisted unless there is a 
REASONARI.E SUSPICION to believe that the individual is engaging in terrorism 
and/or terrorist activities. For example, if a child reaches the age of 21 and 
there is reasonable suspicion to believe he or she was knowingly involved in 
terrorist AC i ivity by providing material support to a FTC, he or she can remain 
watchlisted based upon this DEROGA roRY ineormation. On the other hand, once 
a child of a known or SUSPECIED TERRORIST turns 21 years of age, the individual 
should no longer be watchlisted under this exception because he or she is not 
considered a child of the known or suspected terrorist and additional 
DEROGATORY INFORMATION would be needed to meet the reasonable suspicion 
standard. 



^^The INA defines "child" as "an unmarried person under 21 years of age " INA § 10l(b)(l)[8 U.S.C. 1 101(b)(1)]. 

The discussion in Paragraph 3.14.1 is limited exclusively to spouses and children; all other family members 
(including mothers, fathers, sisters and brothers) should be nominated for inclusion in the TSDB only if there is 
DBKOC.A roRY INHORMA TION that the individual has a close connection to a known or susi'ix tkdtf.rroris i and that 
connection meets the RHASONABLK SUSPICION standard. Absent independent UbRCXiA lORV INFORMATION, records for 
these individuals may be retained in TIDE for analytic purposes. See Paragraph 1 .53.2.2 for treatment of these other 
family members as "non- riiRRORlST" records that may reside in TIDE for analytic purposes but are not exported to the 
TSDB (known as TIDE Category Code 160). 

'\See INA § 2!2(a)(3)(B)(i)(IX)l8 U.S.C. 1 182(a)(3)(B)(i)(IX)]. While this provision does not apply when the activity 
causmg the alien to be found inadmissible occurred more than 5 years before the spouse or child's admissibility is being 
considered, the analysis of the time limit's application will be determined by SCREFNERS upon ENCOUNTER. 
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3. 1 4.2 Endorsers and Espouscrs. An alien who endorses or espouses TERRORIST activity 
or persuades others to endorse or espouse lERRORlS'l' ACI lvi i Y or support a terrorist 
organization may be inadmissible under the INA and should be nominated. 

3.14.3 Incitement. Inciting an individual to commit an act of TERRORISM and/or TERRORIST 
ACTlvn Y under circumstances that indicate an intention to cause death or serious bodily 
harm is considered engaging in TERRORIST ACTIVITY. The individual may be 
inadmissible under the INA and should be nominated. 

3.14.4 Supporters of a Designated Terrorist Organization. Supporters of a DTO may be 

inadmissible under the INA and should be nominated if the support is operational in 
nature. If support is merely ideological, the individual should not be nominated. 

3.14.5 Representatives. Representatives of terrorist organizations and representatives 
of any political, social or other group that endorses or espouses TliRRORlST ACTIVITY 
may be inadmissible under the INA and should be nominated. Representatives include 
an officer, official, or spokesman of an organization, and any person who directs, 
counsels, commands, or induces an organization to engage in lERRORlST Acnvi FY. 
Neither membership in, nor association with, the organization or group is required. 

3.14.6 TERRORISTS, Extremists, Jihadists, Militants, Mujahideen or Insurgents.^" 

Nominations of individuals described by sources as " TERRORISTS", "extremists", 
"jihadists", "militants", "mujahideen" or "insurgents"^'", (an exclusive list) will be 
accepted into the TSDB as exceptions for export to DHS' WLS and DOS' CLASS- 
VISA and CLASS-PASSPORT for immigration and border processing when the 
following four conditions apply: 

3.14.6.1 The individual is a not a U.S. Citizen or National (e.g., the individual is a 
foreign national or a LPR); 

3.14.6.2 The context suggests a nexus to terrorism; 

3.14.6.3 Adequate identifiers are available to permit identification"; and, 

3. 1 4.6.4 The information has been evaluated as being credible. 

3. 14.6.5 It is important to recognize that some activities associated with extreme 
political or religious views expressed by aliens in the United States may constitute 
the exercise of rights guaranteed by the First Amendment (e.g., the rights to free 
speech, assembly and religious exercise).^^ Therefore, .someone so labeled based 



This exception i.s commonly referred to as "label plus" nomination. 

Insurgency is defined as an "organized movement" aimed at the overthrow of a constituted govcrnnient through the 
use of subversion and armed conflict. 

" An adequate identifier is a biomctric, or a last name, first name and any one of the additional identifiers listed in 
Chapter 2, Section II. 
See Chapter 1, Section III concerning constitutionally protected activities. 
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in part on this type of constitutionally protected activity, must have other 
substantive DEROGATORY ini-ORMATIon indicative of TFRRORIST intent. As 
previously noted, nominations may not be made based solely on protected activity. 



3.14.7 Additional Derogatory Information Required (TIDE Category Code 99s and 
50s). NCTC will retain a record in TIDE if it is determined that the information pertains 
to, or is related to, TERRORISM. However, if a record involving an alien, which 
includes LPRs, does not contain sufficient dhroga lORY informa tion to meet any of 
the aforementioned exceptions to the I'SDB's REASONAliLi-; SUSPICION standard for 
inclusion, NCTC will generally designate the record as a Category Code 99 (the TIDE 
category code "applied when DliROGA lORY INFORMATION does not meet the 
REASONABLE SUSPICION standard for watchlisting because it is very limited or of 
suspected reliability but there is a possible nexus to TERRORISM") or a Category Code 50 
(the TIDE category code applied when an individual has a defined relationship with the 
KNOWN or SUSP|-.Cri:n TERRORIST, but whose involvement with the KNOWN or SUSPECTED 
TERRORIST'S activities is unknown)''\ making it available for export to TSDB for use by 
DOS and DIIS for visa adjudication and immigration processing. 

. SPECIAL CONSIDERATIONS 



3.15 Nominations of U.S. PKRSONS. Nominations of U.S. PERSONS, in accordance with the Attorney 
General approved procedures applicable to each element of the IC^^, will be made pursuant to 
the procedures set forth below to ensure compliance with this ri:asonable SUSPICION 
standard. Nominations of U.S. PERSONS shall be made based on information from sources of 
known reliability or where there exists additional corroboration or context supporting 
reasonable SUSPICION. NOMINATING AGENCIES will review information on U.S. PERSONS 
pursuant to procedures set forth below consistent with the nature of the reporting supporting 
the nomination and the protection of sources and methods. 

3.15.1 Special handling is warranted for U.S. PERSONS nominated for watchlisting, especially 
by an Agency other than the I<BI. To ensure compliance with the Watchlisting (Juidance 
that the REASONABLi; suspicion standard exists for U.S. persons in the TSDB, as well as 
to ensure proper interagency coordination, a formal process has been implemented that: 

3.15.1.1 Ensures the FBI is aware of U.S. PERSONS nominated by any other Department 
or Agency; 



See Paragraph 1 .26. 
" See FN 28, supra. 

The referenced procedures are those approved for each element of the 10 pursuant to Executive Order 12333, as 
amended, which stales in relevant part, "lilements of the Intelligence Community are authorized to collect, retain, or 
disseminate information concerning United States persons only in accordance with procedures established by the head 
of the Intelligence Community element concerned or by the head of a ncparfmcnt containing such element and 
approved by the Attorney General, consistent with the authorities provided by part 1 of this Order after consultation 
with the Director." See Executive Order 12333, Paragraph 2.3, as amended by Executive Order 13618 (July 6, 2012). 
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1 .2 Requires review of the watchlist nomination decision and concurrence by the 
TSC that RBASONABI.E SUSPICION exists for watchlisting; 

1 .3 Ensures there is interagency awareness of all U.S. PERSON nominations (FBI 
or otherwise); and, 

1 .4 Rnsures there is U.S. Government coordination in the investigation and/or 
intelligence gathering on these individuals, including strategies for engagement 
with foreign partners if required. 



5.2 NCTC should include in TIDE U.S. PERSONS who are under International terrorism 
Preliminary Investigation by the FBI but who have not been deemed to meet the 
REASONAHEE SUSPICION standard and U.S. persons with a nexus to terrorism, but for 
whom there is insufficient DEROGATORY INFORMATION to support entry in TSDB. These 
TIDE records on U.S. persons will not be provided to TSC for export via the TSDB 
unless approved of as an exception to the REASONABLE SUSPICION standard pursuant to 
Section V in this Chapter of the Watchlisting Guidance, infra, or as part of a TBU 
pursuant to Paragraph 1.59 of the Watchlisting Guidance. 

5.3 For U.S. PERSONS nominated by other Government Agencies who are not under FBI 
investigation, NCTC analysts receive, process, and export these subjects for inclusion in 
the TSDB, as appropriate under current procedures. As part of the processing, NCTC 
analysts identify and share these U.S. PER.SON identifiers with the FBI's Foreign Terrorist 
Tracking Task Force (FTTTI-) for assessment, and notifying the FBI case agent of the 
inclusion. 



3.16 Political Figures or Purposes. Heads of State or other Government officials should be 
nominated when there is particularized derogatory ini-orma i ion to support a 
REASONABLE SUSPICION to believe the individual is engaging or has engaged in conduct 
constituting, in preparation for, in aid of, or related to TERRORISM and/or terrori.ST 
ACTIVITIES. Waivers or other appropriate action can be requested from U.S. Customs and 
Border Protection (CBP) in coordination with DOS to facilitate the travel of a properly 
watchlisted Head of State or other government officials to the extent necessary. 

3.16.1 Watchlisting an individual is prohibited based on political purposes, retaliation, or 
any other reason unconnected to the REASONABLE SUSPICION standard. 

3.17 Identities of Deceased Individuals. 

3.17.1 The TSDB will not include identity information of KNOWN or SUSPECTED 
TERRORISTS that are confirmed dead'^^ unless: 



Subjects are considered "confirmed dead" under the following circumstances: 

a. The subject's death became a high profile case in the public sphere (e.g., media footage confirming suicide 
bombers' deaths, 9/1 1 hijackers, death of Abu Musaq al /arqawi); or, 

b. Reporting on the subject's death has been corroborated by al least'two credible sources (e.g., United States or 
"friendly" foreign government, fully-vetted as.set). 
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3. 1 7. 1 . 1 PARTICUI.ARIZRD DKROGATORY INFORMATION supports a RRASONABI-F 

SUSPICION that an existing known or susphc ILD i i;rroris i is using that identity 
information; or, 

3. 1 7. 1 .2 A recognized terrorist organ ization"** collects KNOWN or SUSPRCTP.D TRRRORIST 
identity information for use by its members in preparing for or committing 
TERRORIST acts and identity or travel documents {e.g., related to a deceased KNOWN 
or SUSPECTFD TERRORIST of that organization) have not been recovered. " Trusted 
travel documents" include all documents used for border crossings. 

3.17.2 NOMINATING AGENCIES will share information regarding a watchlisted or nominated 
individual's deceased status under Addendum B of the TSCMOU, section (7)(m) ("Any 
other TERRORISM lN|-()RMATlON that ORIGINATORS specifically provide for passage to the 
TSC"). NCTC will export deceased status to the TSC, and the 'I SC will export deceased 
status to end u.ser screening systems, nominating AGENCIES will mark deceased status 
information "11 DF. Restricted" in cases where the status, because of sensitive sourcing, 
should not be forwarded to the TSC. I IDF, restricted information will not be exported to 
the TSC. When a nomination is made on a deceased person in accordance with this 
paragraph, the status indicator within TIDE that is exported to the TSC will be marked 
to reflect that the person is deceased. 

. EXAMPLES OF TERRORISM AND/OR TERRORIST ACTIVITIES 

3. 1 8 Examples of TERRORISM and/or terrorist activities may generally include conduct 

intended to intimidate, coerce, influence, or affect civilian populations or government policy 
consisting of: 

3.18.1 destruction of aircraft or aircraft facilities (1 8 U.S.C. 32); 

3.18.2 violence at international airports (18 U.S.C. 37); 

3.18.3 biological weapons (18 U.S.C. 1 75 or 175b); 

3.18.4 variola virus (18 U.S.C. 175c); 

3. 1 8.5 chemical weapons ( 1 8 U.S.C. 229); 

3.18.6 assassination and kidnapping of Congressional Members, Cabinet Officials, and 
Supreme Court Justices(l 8 U.S.C. 35 1 (a)(b)(c) or (d)); 

3.18.7 nuclear materials ( 1 8 U.S.C. 83 1 ); 

3.18.8 participation in nuclear and weapons of mass destruction threats to the United States 
(18 U.S.C. 832); 

3.18.9 plastic explosives (18 U.S.C. 842(m) or (n) footnote I.); 

3.18.10 arson and bombing of Government property risking or causing death (18 USC 
844(0(2) or (3)); 

3.1 8.1 1 arson and bombing of property used in interstate commerce (18 U.S.C. 844(i)); 



A classified list of recognized terrorist organizations that are known to reuse TERRORIST identity information is 
available on the Watchiisting Community of Interest portal on NCTC Current. 
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3.18.12 killing or attempted killing during an attack on a Federal facility with a dangerous 

weapon (18 U.S.C. 930(c)); 
3. 1 8. i 3 conspiracy to murder, kidnap, or maim persons abroad ( 1 8 U.S.C. 956(a)( I )); 

3. 1 8. 1 4 damaging a protected computer used in interstate or foreign commerce or that is used 
exclusively by a financial institution or the United States Government (18 USC 
1030(a)(1); 18 U.S.C. 1 030(a)(5)(A)(i) resulting in damage as defined in 
1030(a)(5)(B)(ii) through (V)); 

3.18.15 killing or attempted killing of officers and employees of the United States (18 U S C 
1114); 

3.18.16 murder or manslaughter of foreign officials, official guests, or internationally 
protected persons (18 U.S.C. 1116); 

3.18.17 hostage taking (18 U.S.C. 1203); 

3.18.18 damage to Government property (18 U.S.C. 1361); 

3.18.19 destruction of communication lines, stations, or systems (18 U.S.C. 1362); 

3.18.20 injury to U.S. aircraft or vessels (18 U.S.C. 1363); 

3.18.21 injury to U.S. diplomatic, consular, military, or other property (18 U.S.C. 1363); 

3.18.22 destruction of an energy facility (18 U.S.C. 1366(a)); 

3.18.23 Presidential and Presidential Staff assassination and kidnapping (18 U S C 1751(a) 
(b), (c), or (d)); 

3.1 8.24 acts of violence against railroad carriers and against mass transportation systems on 
land, on water, or through the air (18 U.S.C. 1992); 

3.18.25 destruction of national defense materials, premises, or utilities (18 USC 2115- 18 
U.S.C. 2156); 

3.18.26 violence against maritime navigation (seizing a ship by force, destroying a ship or 
damaging its navigation system.s) (18 U.S.C. 2280); 

3.18.27 violence against maritime fixed platforms (an artificial island, installation or 
structure permanently attached to the sea-bed for the purpose of exploration or 
exploitation of resources or for other economic purposes (18 U.S.C. 2281); 

3.18.28 homicides and other violence against U.S. nationals occurring outside of the United 
States (18 U.S.C. 2332); 

3.1 8.29 the use of weapons of mass destruction (1 8 U.S.C. 2332a); 

3. 1 8.30 acts of ti-rrorism transcending national boundaries (18 U.S.C. 2332b); 

3.18.31 bombing of public places and facilities (18 U.S.C. 2332f); 

3.18.32 producing, transferring, or threatening to use missile systems designed to destroy 
aircraft (18 U.S.C. 2332g); 

3.18.33 producing, transferring, or threatening to use radiological dispersal devices (18 
U.S.C. 2332h); ^ 

3.1 8.34 harboring i iiRRORlSTS (18 U.S.C. 2339); 

3.1 8.35 providing material support to TRRRORISTS (18 U.S.C. 2339A); 

3.1 8.36 providing material support to terrorist organizations (18 U.S.C. 2339B); 

3. 1 8.37 financing liiRRORlSM ( 1 8 U.S.C. 2339C); 

3.18.38 receiving military-type training from a F I G (18 U.S.C. 2339D)- 

3.18.39 torture (18 U.S.C. 2340A); 

3.18.40 developing, transferring, possessing, or threatening to use atomic weapons (42 
U.S.C. 2122); ^ ^ 
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3.18.41 sabotage of nuclear facilities or fuel (42 U.S.C. 2284); 

3.18.42 aircraft piracy (49 U.S.C. 46502); 

3. 1 8.43 assault on a flight crew with a dangerous weapon (49 U.S.C. 46504); 

3.18.44 carrying a weapon or explosive aboard an aircraft (49 U.S.C. 46505(b) or (c); 49 
U.S.C. 46506 if homicide or attempted homicide is involved); 

3.18.45 damaging or destroying an interstate gas pipeline facility, an interstate hazardous 
liquid pipeline facility, or either an intrastate gas pipeline facility or intrastate hazardous 
liquid pipeline facility (49 U.S.C. 60123(b)); or 

3. 1 8.46 manufacturing, distributing, or possessing controlled substances intending to provide 
anything of pecuniary value to a FTO, member, or group (Section lOlOA (iv) of the 
Controlled Substances Import and Export Act). 
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CHAPTER 4: NO FLY, SELECTEE AND EXPANDED SELECTEE LISTS 

IMPLEMENTATION GUIDANCE 

I. BACKGROUND 

4. 1 On October 2 1 , 2004, the Deputies Committee established the criteria for the No Fly and 
Selectee Lists. On January 10, 2005, the DHS released the No Fly and Selectee Lists 
Implementation Guidance (Implementation Guidance) to provide direction on how to 
implement the No Fly and Selectee List criteria. The Implementation Guidance was updated 
and supplemented on July 25, 2006. 

4.2 On February 8, 2008, the Deputies Committee approved the addition of a third and fourth 
criterion to the No Fly List. The Terrorist Screening Center Policy Board Working Group^^ 
revised the Implementation Guidance on March 5, 2008, to provide direction on how to 
implement these new criteria. 

4.3 Following the attempted trrrorist attack on December 25, 2009, the President directed that 
a review of the current No Fly and Selectee List criteria be conducted and recommendations 
be made regarding whether any adjustments were needed. The Terrorist Screening Center 
Policy Board Working Group, in conjunction with the Information Sharing Access IPC, 
recommended certain changes in the lists' criteria and implementation guidance. Those 
recommendations were approved by the Deputies Committee on July 16, 2010. 

IL PRE-CONDITIONS FOR PLACEMENT ON THE NO FLY OR SELECTEE 
LIST 

4.4 Generally, in order to be included on either the No Fly or Selectee List, two pre-conditions 
must both be met: 

4.4.1 Minimum Identifying Criteria. Absent a Special Situation as described below^°, 
minimum identifying biographic criteria consisting of First Name, Last Name, Full Date 
of Birth are required; and, 

4.4.2 Minimum Substantive Derogatory Criteria. The minimum substantive derogatory 
criteria for inclusion must be met.^' 



This Working Group included representatives from Department of State. Department of Justice, Department of 
Homeland Security, I'ederal Bureau of Investigation, Central Intelligence Agency, Transportation Security 
Administration, National Countcrtcrrorism Center, Terrorist Screening Center, Department of Treasury and U S 
Customs and Border Protection. 

See Chapter 4, Section IX, for additional information regarding the full date of birth requirement and applicable 
exceptions. '^'^ 

See Paragraph 1.58 for expedited nominations procedures. 
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III. NO FLY LIST CRITERIA 

4.5 Any person, regardless of citizenship, who represents: 

4.5. 1 a threat of committing an act of "international terrorism" (as defined in 1 8 U S C 
2331(1)) or "domestic ti:rrorism" (as defined in 18 U.S.C. 2331(5)) with respect to an 
aircraft (mcludmg a threat of air piracy, or a threat to airline, passenger, or civil aviation 
security); or, 

4.5.2 a threat of committing an act of "domestic TERRORISM" (as defined in 18 U.S.C. 
233 1 (5)) with respect to the homeland''^; or, 

4.5.3 a threat of committing an act of "international TllRRORiSM" (as defined in 1 8 U.S.C. 
2331(1)) against any U.S. Government facility abroad and associated or supporting 
personnel, including U.S. embassies, consulates and missions, military installations (as 
defined by 10 U.S.C. 2801(c)(4)), U.S. ships, U.S. aircraft, or other auxiliary cratl 
owned or leased by the U.S. Government; or, 

4.5.4 a threat of engaging in or conducting a violent act of terrorism and who is 
OPERATIONALLY capable'^ of doing so. 

4.6 Detainees at the Naval Station, Guantanamo Bay, Cuba. Any individual who was a 
"detainee" held at the Naval Station, Guantanamo Bay, Cuba, unless the President certifies in 
wntmg to Congress that the detainee poses no threat to the United States, its citizens, or its 
allies. For purposes of this subparagraph, the term "detainee" means an individual in the 
custody or under the physical control of the United States as a result of armed confiict.'" 

IV. FURTHER CLARIFICATION OF THE NO FLY CRITERIA 

4.7 Third No Fly List Criterion. Prior to the addition of the third No Fly List criterion {see 
Paragraph 4.5.3), a concern over the breadth of the No Fly List arose when known or 
SUSPECTED TERRORISTS who posed a threat to a U.S. military base overseas did not meet the 
criteria for inclusion on the No Fly List. Despite national interests, the threat to the overseas 
military base did not involve either civil aviation (as set forth in the first No Fly List criterion) 
or an act of domestic terrorism to the homeland (as set forth in the second No Fly List 
criterion). "Domestic Terrorism" requires that a subject's TERRORIST ACTIVITIES occur 
primarily within the territorial jurisdiction of the United States. "Homeland" does not include 
bases and embassies located abroad. F.ven in those instances when the IC had identified a 
KNOWN or sijspi:cti:d terrorist's specific target, known or suspecti;d terrorists 
maintained the advantage of operational flexibility. The third No Fly List criterion addresses 



Vff?"nrs'^c''233f(5^)(Q'*''^'^ ^^'^ ^^"^^^ ^^^^ primarily occur "within the territorial jurisdiction of the United States.' 

" See Paragraph 4.8.2, infra, that defines "OPERATIONALLY CAPABLE." 
See 49 U.S.C. 44903(j)(2)(C)(v). 
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this specific vulnerability and counters the ability of KNOWN or SUSPliCTED TERRORISTS to 
target U.S. Government facilities outside of the "homeland" (e.f^r, the October 12 2000 attack 
upon the U.S. Navy guided missile destroyer USS Cole while it was harbored in the Yemeni 
port of Aden). 

4.8 Fourth No Fly List Criterion. 

4.8.1 Enable Flexibility. The fourth No Fly List criterion (see Paragraph 4.5.4) is intended to 
enable nexibility for nominations to the No Fly List of operationally capable 
KNOWN or susi>i :cti ;d terrorists who pose a threat of committing an act of 
international terrorism abroad, but who do not meet the first, second or third No Fly 
List criterion because they do not pose a threat to civil aviation, a threat to the homeland, 
or a threat to U.S. facilities and their associated or supporting personnel. Previously, the' 
No F ly List criteria did not prevent known or SUSPECTED TERRORISTS from traveling 
aboard aircraft, even though they may have had the intent and OPERATIONAL CAPABil ITY 
to commit a terrorist act against U.S. nationals abroad (outside of the "homeland") or 
against a target with no nexus to the United States or its nationals. The fourth No Fly 
List criterion now addresses these two vulnerabilities. 

4.8.2 OPERATIONALLY CAPABLE DcHned. An individual is "operationally capable" if, 
ba.sed on credible intelligence, he or she, acting individually or in concert with others' 
reasonably appears to have the ability, knowledge, opportunity, and intent or is actively 
seeking the opportunity to engage in a violent act of terrorism consistent with 18 
U.S.C. 233 1 or 1 8 U.S.C. 2332b. For example, attempting to obtain an lED would 
indicate an individual is OPERATIONALLY capable of committing an act of terrorism. 
However, simply conducting internet research concerning ILDs would not be sufficient 
without additional activity. Depending on the circumstances, and in combination with 
other facts, scouting potential targets or traveling for no legitimate purpose to places that 
have TERRORIST training grounds, regardless of whether the person is presently capable 
of using an lED, might also indicate an individual is OPERAHonally capable of 
committing an act of TERRORISM. 

4.8.3 Possible Indicators of Being operationally capable. In determining whether an 
mdividual is OPERATIONALLY CAPABLE, consideration should be given to the following 
indicators regarding ability, knowledge, opportunity, and/or intent: 

4.8.3. 1 Subject has undergone terrorist training or been provided some instruction, 
to include receiving military training by a designated terrorist group; 

4.8.3.2 Subject has indicated intent to participate in planning/conducting an attack; 

4.8.3.3 Subject has expressed desire to martyr him/herself; 

4.8.3.4 Subject is in repeated contact with a KNOWN TERRORIST facilitator who 
recruits or facilitates travel of operatives; 

4.8.3.5 Subject is planning an attack either alone or as part of a group; or. 
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4.8.3.6 Subject is associated with a terrorist group/cell and the subject is 
accumulating weapons/explosives. 

4.9 OPERATIONALLY CAPABLE Scenarios. The three scenarios set forth below serve as some 
examples of No Fly List nominations that would fall under the fourth No Fly List criterion: 

4.9.1 There is credible information that the planning or preparation for a TERRORIST attack 
agamst the mtcrcsts of the United States or a foreign government is ongoing and there is 
an mdication that an individual is OPERATIONALLY CAPABLE; 

4.9.2 There is credible information that an individual is linked with an organization known to 
target U.S. mtcrcsts. The actual target may be unknown but indicated to be a 
commercial facility frequented by U.S. citizens abroad. Intelligence identifies an 
operational or pre-operational capability of this individual whose cell is planning a near- 
term attack on a target (e.g.. a plot to kill U.S. nationals residing in a foreign hotel or 
frequenting a foreign nightclub); or, 

4.9.3 There is credible information that an individual is linked with an organization known to 
target foreign governments. The actual target may be unknown but indicated to be a 
foreign government facility such as an embassy, consulate, mission or military 
mstallation. Intelligence identifies an operational or pre-operational capability of this 
individual who.se cell is planning a near-term attack on a target (e.g., a plot to bomb the 
British Parliament or the March 1 1 , 2004, Madrid bombing). 

4. 1 0 Onc-Timc Waiver Policy. 

4. 1 0. 1 TSA regulations prohibit U.S. flagged air carriers and foreign flagged air carriers 
from transporting individuals, who pose the level of threat required for No Fly status on 
regulated commercial flights, including all nights operated by U.S. air carriers 
regardless of the location, and llights operated by foreign air carriers to, from, or over 
the United States. This prohibition applies regardless of the individual's status as a IJ S 
PERSON. 

4.10.2 When necessary, the U.S. Government may authorize and grant a One Time Waiver 
(OTW) to an air carrier permitting the carrier to transport an individual on a specified 
Itinerary under controlled conditions. OTWs are coordinated with DHS (including CBP 
and TSA), FBI, DOS and DOJ as appropriate, prior to being authorized by TSC. Once 
authorized by TSC, TSA will review the conditions of transport and may grant the 
waiver, permitting the air carrier to transport the individual. If the itinerary changes, or 
the conditions of transport of the individual change, ISA will deny boarding to the ' 
individual until such time as satisfactory conditions are present. 

4. 1 0.3 U.S. PERSONS Encountered Overseas. 

4. 1 0.3.1 While placement on the No Fly Li.st docs not legally bar a U.S. PERSON from 
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returning to the United States, the U.S. Government has adopted a policy to review 
all cases in which a U.S. PF.RSON on the No Fly List is denied boarding on a 
commercial llight bound for the United States to determine whether an O TW may 
be appropriate. TSC will initiate this assessment immediately, and may approve an 
OTW in advance. TSA will not review or authorize an OTW until such time as an 
acceptable itinerary is available. 

4.10.3.2 In order to facilitate communication with such an individual, the U.S. Government 
has determined, as a mailer ofpolicy, that U.S. Citizens denied boarding on a 
commercial flight returning to the United States should be referred to the consular 
section of the nearest U.S. Embassy or Consulate, which will facilitate communication 
with the individual, including providing the individual with instructions in the event an 
OTW is authorized. In keeping with the U.S. Government's traditional policy of neither 
confirming nor denying whether an individual is on the Terrorist Watchlist, the 
individual is not informed of his or her watchlist status or that he or she would be 
traveling under a waiver. 

V. SELECTEE LIST CRITERIA 

4. 1 1 Selectee List Criteria. Any person regardless of citizenship, who does not meet the criteria 
for inclusion on the No Fly List and who: 

4.11.1 is a member of a foreign or domestic TF.rrorist organization" (including a "foreign 
ti;rrorist organization" designated pursuant to Statute or Executive Order, as described 
in Paragraph 3.1 1.2); and, 

4. 1 1 .2 is associated with "terrorist activity" (as such term is defined in section 
212(a)(3)(B) of the INA [8 U.S.C. 1 1 82(a)(3)(B) |); unless information exists that 
demonstrates that the application of secondary screening to such person is not necessary, 
in which case such persons may be excluded from the Selectee List. 

VI. EXPANDED SELECTEE LIST CRITERIA 

4.12 The Expanded Selectee List (ESEL) includes records in the TSDB that contain a full name 
and full date of birth, regardless of the citizenship of the subject, who do not meet the criteria 
to be placed on cither the No Fly or Selectee Lists, excluding exceptions to the reasonable 
SUSPICION standard. 

VII. ACTIONS BASED UPON POSITIVE MATCHES TO THE NO FLY, 
SELECTEE, OR EXPANDED SELECTEE LISTS 



" Members of a defunct terrorist group are included in this criterion if the person was a member of the group when it 
participated m TERRORIST ACTIVITY. 
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4.13 The actions resulting from inclusion on the No Fly, Selectee, or Expanded Selectee List are 
generally as follows: 

4. 1 3. 1 Individuals that are POSITIVE MATCHES to the No Fly List are prohibited from 
boarding an aircraft; 

4. 1 3.2 Individuals that are positive matches to the Selectee List undergo enhanced 
screening prior to boarding an aircraft; 

4.13.3 Individuals that are POSITIVE MATCHES to the Expanded Selectee List undergo 
enhanced screening prior to boarding an aircraft. 

4.14 Selectee, Expanded Selectee, and random screening all result in the same operational response 
of receiving enhanced screening by Transportation Security Officers prior to boarding an 
aircraft. TSA will notify the TSC of all No Fly, Selectee, and Expanded Selectee 
ENCOUNTERS. 

VIII. IMPLEMENTATION GUIDELINES 

4.15 General Guidelines. The watchlisting community has developed six general guidelines 
regarding the No I'ly and Selectee Lists that should be reemphasi/.ed in order to effectively 
implement the No 1-ly List and Selectee List criteria. The six general guidelines are: 

4.15.1 When evaluating the signiHcance, relevance and validity of a threat, careful 
consideration should be given to the extent to which the threat is current, specific and 
credible. 

4. 1 5.2 The Selectee List is not a default position for those who do not qualify for inclusion 
on the No Fly List and has distinct elements that must be met before an individual may 
be included. 

4. 1 5.3 The purpose of the No Fly List is to protect against acts of terrorism; inclusion on 
the No I'ly List has consequences that arc operational, legal, economic, and diplomatic. 

4.1 5.4 Except for expedited nominations made pursuant to Paragraph 1 .58 of the 
Watchlisting Guidance, the decision to include a person on the No Fly List or Selectee 
List must include substantive DEROGATORY INFORMA HON that satisfies the 
aforementioned criteria and thus justifies inclusion on either li.st. In cases where 
nominations contain no substantive DEROCJATORY ini ormahon, or contain insufficient 
substantive DEROCJATORY INFORMATION, the individual will not be included on either the 
No Fly List or Selectee List. 

4.15.5 In accordance with determinations made pursuant to Paragraph 1.59 of the 
Watchlisting Guidance, the White House may direct the TSC to place categories of 
individuals on the No Fly List or the Selectee List on a temporary basis based on current 
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and credible intelligence information or a particular threat stream that indicates a certain 
. category of individuals may conduct an act of domestic or international i i-rrorism. 

4. 1 5.6 Under exigent operational circumstances, when DLROGATORY informa tion may not 
be widely disseminated or stored in TIDE, individual watchlist status determinations can 
be made by the Director of the TSC, in accordance with the relevant eriteria^^ contained 
in the Watchlisting Guidance. Coordination should occur with relevant nominatin(} 

AGENCIi-S and SCRI2ENERS. 

6 Totality of the Information. The foregoing guidance is neither intended to be determinative 
nor intended to serve as a checklist. Rather, it is intended to guide the watchlisting 
community in assessing whether the established criteria are satisfied for a specific record, 
based on the totality of available information, a current threat stream, and/or the current threat 
environment. 



IX. SPECIAL SITUATIONS 



4.17 Requirement for Full Names and Complete Dates of Birth. Generally, TERRORIST 
identities nominated to either the No Fly or the Selectee List must have both a full name and a 
complete date of birth. Identities without both will usually not be included on either list. 
Dates of birth shall not be fabricated.'* 

4. 1 7. 1 There is, however, a narrow exception to the requirement for full names and 

complete dates of birth for individuals from non-Visa Waiver Program countries for 
international ri-RRORlST nominations. If a non-Visa Waiver Program country'''^ has 
issued a travel document with only a year of birth, or a verified government-i.ssued 
identification document with only a year of birth, then it is permissible to use only that 
year of birth. The NOMINATING AGENCY, however, should, whenever possible, specify 
the type of document containing the year of birth, and the passport number (if the 
document is a pa.ssport). Otherwise, a year of birth alone will not be accepted for 
nominations to the No Fly or Selectee Lists. The NOMINATING AGENCY has a continuing 
obligation to attempt to determine the complete date of birth. 

4.18 Expedited Waiver of "Full Date of Birth" Requirement for No Fly or Selectee 
Nominations. When necessitated by exigent circumstances, a NOMINA TOR may nominate an 
individual or individuals to the No Fly or Selectee List with only a partial date of birth, but for 
whom there is additional identifying information. This provision is intended to enable 
nominations based on current and credible intelligence information or a particular threat 



Determinations made under this section apply to the No Fly, Selectee and Expanded Selectee List criteria. 
See Paragraph 1 .59 for a complete discussion of expedited nomination procedures for temporary, threat-based 
categories. 

" The dates of birth of January I (01/OI/xxxx), July I (07/OI/xxxx), November 11(11/1 1/xxxx), and December 3 1 
( 1 2/3 1/xxxx) are examples of dates that may be fabricated and as such, should receive additional scrutiny at all stages of 
the reporting, nomination, and watchlisting process. 
Visa Waiver Program countries include a complete date of birth in their pa.ssports. 
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stream that indicates the subjcct(s) may be used to conduct an act of domestic or international 
terrorism as defined in 18 U.S.C. 2331(1), or as a Federal crime of terrorism as defined in 18 
U.S.C. 2332b(g)(5). The goal of this provision is to fashion a watchlisting response that is 
appropriate to the nature, specificity, and severity of the threat. To achieve this goal, in 
addition to the credibility of the threat intelligence, due consideration should be given to: 

4. 1 8. 1 The harm to public safety posed by the threat; 

4. 1 8.2 The clarity and specificity of the information giving rise to the threat as to time, 
place, method, and identity of the suspected perpetrator(s); 

4.1 8.3 The anticipated impact on international and domestic travel, civil liberties, 
and foreign relations; and, 

4. 1 8.4 The best available screening tools, other than the No Fly or Selectee Lists, given the 
type and specificity of identifiers and travel data. 

4.19 This waiver should be utilized in limited circumstances when extreme DEROGAIORY 
INFORMATION has been identified demonstrating the threat. The waiver should be valid as 
long as the threat remains. 

X. NOMINATIONS THAT ARE INELIGIBLE/NOT SUITABLE FOR EITHER 
THE NO FLY OR THE SELECTEE LIST"" 

4.20 Nominations based on exceptions to the minimum substantive derogatory criteria contained in 
Paragraph 3.14, including immediate family members of ti;rrorists (/.e., spouses or children 
of a KNOWN or susrecTi:n ti-rrorist)*" arc ineligible/not suitable for inclusion on either the 
No Fly or Selectee List, absent independent deroga iory information; 

4.2 1 Subjects of lost or stolen passports or travel documents are ineligible/not suitable for inclusion 
on either the No Fly or Selectee List, absent independent DRROGATORY INFORMATION; 

4.22 Deceased individuals are ineligible for inclusion on either the No Fly or Selectee List unless 
they meet the exceptions set forth in Paragraph 3.17, Identities of Deceased Individuals. 



This section can be overridden in the event of an expedited, threat-based categorical nomination procedures, pursuant 
to Paragraph 1 .59. ^ 

" See INA § 212(a)(3XB)(i)(IX)[8 U.S.C. 1 182(a)(.3)(B)(i)(!X)J. 
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CHAPTER 5: ENCOUNTER MANAGEMENT AND ANALYSIS 
I. INTRODUCTION AND PURPOSE 

5.1 This guidance addresses the collection, processing, and analysis of terrorism information 
CO lected by the SCRHENF.rs during an ENCOUNTI-r with a watchlisted subject. As described 
below, all information gathered during an KNCOUNTCR with a KNOWN or SUSPKCTED 
terrorist is referred to as an encounter package. This guidance does not create any 
new authorities for the collection of any information during encounters with known or 
SUSPECTED TERRORIS I S. Rather, it identifies the types of information that a Department or 
Agency should consider collecting during an ENCOUNTl-R with a KNOWN or SUSPECTED 
TERRORIS r If It possesses the authority to collect such information, and should share with the 
interagency community consistent with their legal authorities and executive policy.*' 

5.2 Definitions. 

5.2.1 KNCOUNTER. An ENCOUNTER is defined as an event in which an individual is identified 
during a screening process to be a "POSITIVE MATCH," "POTENTIAL MATCH " or 
"INCONCLUSIVE MATCH," to an individual who has been designated in the TSDB as a 
KNOWN or SUSPECTED TERRORIST. An ENCOUNTER can be a face-to-facc meeting with a 
KNOWN or SUSPECTED TERRORIST, electronic or a paper-based ENCOUNTER (e e the 
KNOWN or SUSPECTED TERRORIST has submitted an application for a benefit liked a visa 
Electronic System for Travel Authorization (ESTA) application, or information is 
provided to the United States by a foreign government, aircraft operator, or other private 
T^r^A ''^P**^'" ^ ^"'y concerned with positive matchi;s, which occur when the 

I SC determines that information about a subject encountered by a SCREENER matches a 
I SDB record. 

5.2.2 terrorism information, terrorism INFORMATION in this chapter includes purely 
domestic terrorism as defined in the TSCMOU and incorporates the definition found in 
in section 1016 of the IRTPA (6 U.S.C 485), as amended. The term "TERRORISM 
INEORMA rioN" means - 

5.2.2. 1 all information, whether collected, produced, or distributed by intelligence, 
law enlorcement, military, homeland security, or other activities relating to - 
5.2.2. 1.1 the existence, organization, capabilities, plans, intentions, 

vulnerabilities, means of finance or material support, or activities of foreign 
or international terrorist groups or individuals, or of domestic groups or 



Sharing information for reasons not related to known or suspectfd terrorist categories should be limited to 
updating biographic identifiers and the sharing of relevant information that may assistln making decisions rlL to a 
change ma person's status m the TSDB and/or Ti-RRORISM INFORMATION s o s reiaiea to a 

'T"'"'' ^^'^^^ '021 or by interagency agreement (e.g.. the In/on^aUor, 

Sharing MOD TAppend.x 5;, the JSC MOV (Appendix 3) and Addendum B to the TSC MOinK^^Z% 
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individuals involved in transnational terrorism; 

5.2.2. 1 .2 threats posed by such groups or individuals to the United States, u S 
PERSONS, or U.S. interests, or to those of other nations; 

5.2.2. 1 .3 communications of or by such groups or individuals; or, 

5.2.2.1.4 groups or individuals reasonably believed to be assisting or associated 
with such groups or individuals; and 



5.2.2.2 includes weapons of mass destruction information. 

5.2.2.2. 1 Weapons of Mass Destruction Information, information that could 
reasonably be expected to assist in the development, proliferation, or use of a 
weapon of mass destruction (including a chemical, biological, radiological or 
nuclear weapon) that could be used by a terrorist or a terrorist organization 
against the United States, including information about the location of any stockpile 
of nuclear materials that could be exploited for use in such a weapon that could be 
used by a terrorist or a terrorist organization against the United States. 

II. PROCESSING TERRORISM INFORMATION FROM ENCOUNTERS 
WITH POSITIVELY IDENTIFIED KNOWN OR SUSPECTED 
TERRORISTS 

5.3 This section describes the major types of encounters by various Departments and Agencies 
ENCOUNTER PACKAGES obtained from a KNOWN or suspected TERRORIST ENCOUNTIR will bc 

processed as follows: 

5.4 Department of Homeland Security encounters. 01 IS has more encoun n Rs with 
KNOWN or SUSPi:CTF.D Ti;rrorists than any other U.S. Government component The 
descriptions below provide information for the majority of DHS ENCOUNTERS, although it is 
not an exhaustive list of ENCOUNTER opportunities or the types of terrorism informa HON 
available for collection. When lawful and available, both biographic and biometric 
information will be collected as part of the liNCOUNTER PACKAGE. 

5.4. 1 U.S. Customs and Border Protection. GBP encounters occur at ports of entry 
(POrO, between POHs, or at the last point of departure to the United States at foreign 
airports through GBP programs like Pre-Clearance and the Immigration Advisory 
Program (lAP). Information available for collection from these ENCOUNTERS may 
include, but is not limited to, pocket litter, travel information, identincation documents 
travel companions, legal documents, and other information gathered during interviews' 
and the examination process. GBP receives international travel reservation information 
of KNOWN or SUSPECTED TliRRORiSTS for commercial air travel to and from the United 
States (which may include travel companion information) and international private and 
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commercial flight manifests, as well as, commercial vessel manifest for travel to and 
from the United States. With the exception of passenger information required by law to 
be transmitted to DHS prior to a passenger's arrival, most information is generally 
collected by GBP when the person is interviewed or apprehended. The National 
Targeting Center - Passenger (NTC-P) and N TC-Cargo (NTC-C) are GBP entities 
responsible for communicating with the TSC regarding KNCOUN r[:RS with known or 
SUSPHCTKD TRRRORlS IS, to include providing relevant ENCOUN l liR information. N i'G- 
P and N'i G-G also provide a copy of the examination results to the fSOU for 
dissemination to the appropriate investigating Agencies. 

5.4.2 Transportation Security Administration. TSA generally encounters KNOWN or 
SUS1H-C I'I:d l RRRORIS i s through screening commercial aircraft passengers against 
subsets of the TSDB and during the application process for a credential or benefit in the 
transportation or critical infrastructure environment (e.g., Transportation Worker 
Identification Credential (TWIG)). When an airline encounters subjects who are 
possible matches to the No Fly or Selectee List, the air carriers are required to supply the 
passenger's name and one piece of identifying data (in the form of a government-issued 
photo identification that contains a date of birth) to the TSA's Office of Intelligence and 
Analysis (OlA). TSA OIA submits that information, along with information regarding 
the carrier, flight number, time of departure, and destination to the TSC. 

5.4.2. 1 Absent an arrest warrant, or unless probable cause arises during the 
ENCOUN I HR, SCREENERS are reminded that placement on the No Fly or Selectee 
List is not a legal basis to detain a known or SLSPECTED TERRORIS l . l o the 

extent legal authority exists to question a known or SUSPECTED terrorist, 
encounters with No Fly subjects at the airport may provide an additional 
opportunity to lawfully obtain encoun i er PACKAGi-; information. For No Fly 
subjects who have made a domestic reservation, DHS will notify TSC in advance 
as well as when the No Fly subject presents at the airport ticket counter. TSC will 
then notify the TSOU who will notify both the FBI case agent and the airport 
liaison agent to coordinate the appropriate operational response. 

5.4.2.2 For known or SUSPECTED terrorist encounters as a result of an 
individual applying for a TSA benefit or credential, ENCOUNTER PACKAGE 
information can include any supporting documents or information collected as a 
part of the application process. I'he i;ncounte:r, and any corresponding 
information, is communicated to the TSC and other Government Agencies, as 
appropriate through TSA OIA. 

5.4.3 United States Citizenship and Immigration Services. U.S. Citizenship and 
Immigration Services (USCIS) interact with millions of individuals every year and 



CBP may also encounter such individuals in the course of processing an application and/or conducting an interview 
of an applicant for a trusted traveler program (e.g., NEXUS, Free and Secure Trade (FAST), Global Entry, SENTRl, 
etc.). 
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ENCOUNTERS KNOWN or SUSPECTED l ERRORiS I S who file petitions or applications for 
immigration benefits internationally and domestically."^ The USCIS official contacts 
the rSC to report an ENCOUNTER with a KNOWN or SUSPEC l ED TERRORlS 1 . Bclbre 
making a decision on the immigration application or benefit, USCIS contacts the 
ORIGINA ior/nominator to obtain additional information that may help determine 
whether the individual is eligible or ineligible to receive the immigration benefit. In 
such cases, USCIS seeks further information from the record owner or case agent and 
may seek de-classification of information relating to the application. In addition, USCIS 
contacts the orK5INATOR/nominator to discuss whether the USCIS decision to grant or 
deny the application or benefit would interrupt or negatively affect any ongoing 
investigation. 

5.4.3. 1 USCIS maintains a presence at law enforcement and intelligence Agency 
entities to further information sharing regarding KNOWN or SUSPECTED 
TERRORlsrs. USCIS maintains information, including the subject's Alien File (A- 
Filc) and other records. The type of information that may be contained in USCIS 
files, including the A-File, could be biomctric data (fingerprints and photographs); 
identity documents; information relating to the application; addresses, as well as 
family and work history information; immigration benefit application information; 
and records of previous ENCOUNTERS that DHS has had with the subject. Other 
SCREENERS — as well as other appropriate organizations who are considering 
nominating a potential KNOWN or SUSPECTED TERRORlS r or who have ENCOUNTERS 
with a person who is a POSITIVE match to a KNOWN or SUSPECTED ri-RRORiS i— are 
advised that they can request, on a case-by-case basis, a copy of the KNOWN or 
SUSPECTED TERRORIST'S A-File from USCIS if the known or suspected 
TERRORIST has applied for immigration or citizenship benefits.*^ 

5.4.4 U.S. Immigration and Customs Enforcement. Immigrations and Customs 

Enforcement (ICR) is the principal investigative arm of DI IS. ICR is also the federal 
law enforcement organization responsible for immigration and customs-related 
investigations and detention within the interior and at the borders of the United States. 
ICE frequently ENCOUN l ERS potential KNOWN or SUSPECTED TERRORISTS during 
enforcement activities under its purview. Such ENCOUN n-RS are documented within ICE 
F:nforcement and Removal Operations (ERO) via the Known Suspected Terrorist 
Encounter Protocol and reported to the TSC and ICE's I lomeland Security 
Investigations (HSI). ICE HSI Special Agents frequently encounter KNOWN or 
SUSPECTI-D llCRRORISTS internationally, domestically, at U.S. POEs, and when KNOWN or 
SUSPEC TED l ERRORls rs are the subjects of an ICE investigation. These ENCOUNTERS are 



" For example, a U.S. PURSON who is a KNOWN or SUSPECTED TERRORIST may file a petition for a foreign national or a 
U.S. PERSON who is not a known or suspected terrorist may file a petition for a foreign national who is a KNOWN or 
SUSPEC I'ED l ERRORIST. 

Because USCIS is the custodian of information acquired through the immigration process relating to an individual 
and because the A-File is not routinely attached to the TSDB or TIDE, a specific request to USCIS is necessary in order 
to obtain information from the A-Filc. 
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documented by HSl Special Agents in Reports of Investigation (ROl). All ROIs 
documenting ENCOUNTERS/intervicws with a KNOWN or SUSPECTED terrorist are 
shared with the IC. 

5.4.4. 1 In addition, under section 428 of the Homeland Security Act, the Secretary of 
Homeland Security has the authority to refuse visas in accordance with the law and 
to assign employees of DHS to diplomatic and consular posts to review visa 
applications and conduct investigations.*^ ICE, through the Visa Security 
Program, exercises this authority. Reviews of visa applications and interviews 
with applicants can result in the encounter of KNOWN or SUSPECTED I liRRORISTS, 
facilitators, and associates as well as reveal previously unknown information 
relating to KNOWN or SUSPEC I"I-:d ti:rroris I S. MSI personnel assigned to the Visa 
Security Program, and to U.S. Embassies and Consulates abroad, work closely 
with their DOS counterparts to identify KNOWN or suspectf.d ti;rrorists and 
report findings through established processes. Finally, ICE may encounter KNOWN 
or suspected TERRORISTS awaiting immigration hearings who are housed in 
service processing/detention centers. These detention facilities can document 
interactions with the aliens while they arc detained in the facility, as well as 
document materials found on the individual at the lime of processing. For all 
immigration and enforcement activities, ICE will communicate with the TSC 
regarding encounters with watchlisted individuals, and will submit relevant 
ENCOUN l ER information to the TSC. 

5.4.5 United States Coast Guard. The U.S. Coast Guard's Coastwatch branch screens crew 
and passenger information on vessel manifests, which are required by regulation to be 
transmitted to the National Vessel Movement Center (NVMC) prior to a vessel's arrival 
in a U.S. port. Coastwatch communicates with the NTC-P and TSC regarding any 
KNOWN or SUSPECTED TERRORIST ENCOUNTERS during this process. The Coast Guard 
physically encounters few known or suspec ted i erroris ts, and such encoun ters 
could occur from random and regular inspections of vessels and port facilities, ship 
boardings, investigations, or Coast Guard licensing activities. The type of information 
available for collection is dependent on the type of ENCOUNTER. The ENCOUN I ER, and 
any corresponding information, is communicated to the I SC through Coast Guard 
Office of Intelligence and Criminal Investigations. Based on the encountering situation, 
intelligence reporting will be written to provide situational awareness to the IC. 

5.4.6 United States Secret Service. Although United States Secret Service (USSS) does not 
encounter many known or SUSPECTED l ERRORl S I S, such ENCOUN l iiRS usually involve 
KNOWN or SUSPECTED TERRORIS 1 S with a domestic nexus to TERRORISM. Such 
encounters can be the result of investigations or for event screening (e.g., National 
Security Special Events, political events, large scale sporting events), fhese 

" Consistent with section 428 of the Homeland Security Act and the Memorandum of Understanding between the 
Secretaries of State and Homeland Security Concerning Implementation of Section 428 of the Homeland Security Act of 
2002, the Secretory of Homeland Security may direct a consular officer to ref use or revoke a visa. 
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ENCOUNTERS will be coordinated with the I'BI, who will handle them as they do all other 
FBI KNOWN or SUSPECTED TERRORIST ENCOUNTERS. 

5.4.7 Department of Homeland Security Intelligence & Analysis. DHS l&A provides end 
products and analytical reports, which are generally available to the NC TC and the 
broader countertcrrorism analytic community, including fusion centers. Dl IS l&A 
works closely with DHS components to ensure non-traditional streams of information 
arc fused with traditional .sources of information from other members of the IC to give a 
complete picture of potential threats to the nation. DHS I&A "connects the dots" for 
intelligence reporting and ENCOUNTERS of the DHS components, and as .such, has 
limited opportunity for ENCOUN TERS with KNOWN or SUSPEC TED TERRORISTS. 

5.5 Department of State ENCOUNTERS. For DOS ENCOUNTERS with a person who is a POSITIVE 
MATCH to a KNOWN or SUSPECTED TERRORIST, the DOS unit at the TSC will do the following: 

5.5.1 Visa Applications. DOS/TSC will upload the electronic visa application from the CCD 
to the individual's EMA record. DOS/ TSC will coordinate with the overseas posts to 
scan in CCD all other available DOS documents associated with the individual. DOS 
information about whether a visa is issued is currently available in individual case 
records in the CCD; DOS is currently investigating upgrades to the CCD's report 
function that will make the visa decision data more easily accessible to TSC and other 
users. 

5.5.2 Visa Revocations. DOS/TSC will upload the electronic visa application from the CCD 
to the individual's F.MA record. 

5.5.3 Passport.s. After encounters with known or SUSPECTED terrorists possessing 
passports issued by the United States, the TSOC will upload the Passport Information 
Electronic Records System (PIERS) application forms from the CCD to the individual's 
I:MA record. DOS/TSC will coordinate with the overseas posts to scan in CCD all other 
available DOS documents associated with the individual. 

5.6 United States Agency for International Development ENCOUNTERS. United States Agency 
for International Development (USAID) works in agriculture, democracy and governance, 
economic growth, the environment, education, health, global partnerships, and humanitarian 
assistance in more than 100 countries. When USAID receives an application seeking fmancial 
assistance, prior to granting, these applications are subject to vetting by USAID intelligence 
analysts at the f SC. If USAID/TSC finds that an application relates to a person who is a 
POSITIVE MA TCH to a KNOWN or SUSPECTED TERRORIST in the TSDB, USAID/TSC will provide 
any terrorism information concerning the application and follow standard TSC procedures 
for processing TERRORISM INFORMA HON, to include logging the ENCOUNrT;R in EMA. 

5.7 Foreign Partner ENCOUNTERS. After each ENCOUNTER by a foreign partner, DOS/TSC will 
ask the respective country for the subject's photo, additional biographic data and any 
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TERRORISM INFORMATION on the RNCOUNTER Information List gathered during the 
ENCOUNTER. Provision of any material collected by the foreign partner depends on the 
arrangement with, and legal authorities of, the particular foreign partner involved. Therefore, 
gathering and sharing this l ERRORiSM INFORMA HON will be done on a case-by-case, country- 
by-country basis. 

5.8 Federal Bureau of Investigation/Law Enforcement ENCOUN l ERS. i hese encoijn i ERS can 
be subdivided into three categories: 

5.8.1 Name-Based Queries. Name-based transaction queries by law enforcement personnel 
{e.g., traffic stops) made to the FBI's National Crime Information Center at the Criminal 
Justice Information Services (CJIS) Division that match a name in the KSTF (a sub-file 
of NCIC) are deemed to be potential MATCHES. They are routed electronically to TSC 
for confirmation and subsequent processing as an ENCOUNTER. 

5.8.2 Fingerprint-Based Queries. !• ingerprint-bascd queries submitted for criminal 
identification purposes (e.g., an arrest/booking) or for civil identification purposes (e.g., 
an employment background check) are made to the Integrated Automatic Fingerprint 
Identification System (lAFIS). For I'osi nvE matches to records flagged as KNOWN or 
SUSPECTED TERRORIST records, the CJIS Division's Special Identities Unit notifies the 
TSC and the FBI case agent (or the Agency that identified the subject as a possible 
TERRORIST). In similar fashion, CJIS Division's Global Initiatives Unit coordinates 
positive fingerprint hits from its foreign submissions with the Legal Attache. It should 
be noted that lAFIS and NCIC are separate systems that are not fully synchronized at the 
present time. 

5.8.3 National Instant Criminal Background Check System. All background checks 
resulting from attempts to buy firearms or to obtain explosive permits submitted to the 
National Instant Criminal Background Check System (NICS) at CJIS are run against the 
KS IT. The TSC is immediately notified of all KS IT "hits." NICS consults with TSC 
to confirm the POSI TIVE MATCHES and the FBI case agent to determine whether there is 
available information about the prospective purchaser to disqualify him or her from 
possessing a firearm or explosive as a matter of law. Regardless of whether the 
purchase is denied or permitted to proceed, all available information is obtained and 
provided to the TSC and, in turn, CTD, as TERRORISM INFORMA HON and processed as an 
ENCOUNTER. 

5.9 Department of Defense ENCOUNTERS. The Department of Defense (DoD) has force 
protection, operational capture/apprehend, and intelligence responsibilities and on occasion 
encounters KNOWN or SUSPECTED TERRORISTS. To the extent DoD knowingly encounters a 
KNOWN or SUSPECTF.D TERRORIST, DoD will report the ENCOUN TER in intelligence channels or 
to the FBI in cases described in the MOU between the FBI and DoD Governing Information 
Sharing, Operational Coordination and Investigative Responsibilities signed August 2, 201 1 
where the FBI is the lead. In cases where the FBI is not the lead for the ENCOUNTER, the 
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Defense Intelligence Agency (DIA) will be responsible for providing extracted information 
from the ENCOlJNTl-R to NCTC via standard DIA national niRRORlSl watch listing procedures, 
which utilize community accepted standards. DoD law enforcement ENCOUNTERS will be 
handled in accordance with established law enforcement standards that provide notification to 
the FBI. 

5.10 All other Departments or Agencies. Any other Department or Agen cy that has ri:RRORlSM 
INI-ORMATION from an i:ncounter will contact the TSC/TSOC at 866-^^^^ to arrange a 
mutually acceptable transmission method. 

in. CATEGORIES OF TERRORISM INFORMATION FROM ENCOUNTERS 
WITH POSITIVELY IDENTIFIED KNOWN OR SUSPECTED 
TERRORISTS OF POTENTIAL INTEREST 

5.1 1 KNCODNTER Information List. The following ENCOUNTER Information List identifies 
categories of l l-RRORlSM ini ormation from encounti:rs with positively identified KNOWN 
or SUSPECTED Tl'RRORlSTS that are of potential interest to nominators, other counterterrorism 
analysts, or the watchlisting community. The items identified are not intended to be an 
exclusive or exhaustive list of what constitutes l ERRORlSM INI ORMATION. 

88 

5.1 1.1 ENCOUNTER information identified for collection in Addendum B to the TSC MOU 
when there is a POSITIVE MA i CH to a KNOWN or SUSPECTED TERRORIST: 

1 . Photographs 

2. Fingerprints 

3. Pocket litter 

4. Written data 

5. Reports of I ERRORISM informa tion 

5.1 1.2 Additional items of potential interest when lawfully collected during an ENCOUNTER 
with a KNOWN or SUSPECTED TERRORIS T: 

1 . Contemporaneous reports including the impressions or observations recorded by an 
official involved in the ENCOUNTER: 

a) Reason/circumstances of ENCOUN l ER 

b) ICE Intel Reports 

c) FBI Reports of Investigations 

d) CBP Incident Reports 

c) CBP Secondary Ilxam Report 
0 USCIS applications or petitions 

g) Non-Immigrant Visa (NIV) Applications (including CCD notes) 



See Appendix 3, TSC MOU. 
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h) State, Local, Tribal, Territorial Police Report 

i) TSA OIA No l-ly and Selectee Reports 

j) TSA OIA ENCOUN n-R Reports (Vetting Match Reports) on transportation workers 

and other populations vetted by TSA against the TSDB 
k) Spot Reports 
1) Suspicious Activity Reports 
m) Impounded vehicle inventory 
n) Any inventory record 

o) Any pictures, video or recording of or from the actual ENCOUNTHR 
p) Biometric or biographic identifiers of traveling associates 

2. Surveillance-related documents: 

a) Maps 

b) l*ictures 

c) Visitor or site information 

d) Plans or diagrams (e.g., architectural drawings, blueprints, schemas) 

3. Context regarding areas of potential interest or possible targets of KNOWN or 
SUSPEC I HD i ERRORIST interest: 

a) Information regarding any high profile events taking place in geographic area of 

ENCOUNIER 

b) Any critical infrastructure sites near the geographic area of ENCOUN TER 

c) Unique characteristics or facts about your domain/area of responsibility/geographic 
area of ENCOUNTER 

d) Event tickets (e.g., sporting events, concerts, designated National Security Special 
events) 

e) Building access passes, electronic cards, fobs, keys 

4. Mode of transportation used by the person who is a POSn iVE MA lCl I to a KNOWN or 
SUSPECTED I ERRORIS 1, along with identifying information: 

a) Vehicle information (e.g., Vehicle registration. Vehicle identification number 
(VIN), Title, Driver's license. Car insurance cards or information) 

b) Pilot medical license 

c) Pilot certificates 

d) Aircraft registration 
c) Marine registration 

f) EZ Pass or electronic vehicle payment system 

5. Travel-related information: 

a) Passport exit/entry stamps indicating places of travel 

b) Any visa application or denial information from other countries 
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c) Travel itineraries 

d) Tickets (e.g., plane, train, boat) 

e) Hotels (e.g., reservation confirmation, receipts) 

f) Rental cars (e.g., reservation confirmation, agreement, receipts) 

g) Reservation method (e.g., via travel agency or travel website) 

h) PNRdata 

i) Travel manifests 

j) Luggage or baggage tags (e.g., airport check-in tags, identification tags, 

lost bag bar code tags) 
k) Claim checks 
I) Storage locker keys 
m) Shipping documents and receipts 

n) Automated Identification System (AIS) information for maritime shipping 

0) Foreign airport security check stickers or labels 

p) Conference/seminar materials (e.g., invitation, brochure, schedule) 

6. Information about gold and jewelry worn by person at time of ENCOUNTER (e.g., 
receipts) 

7. General items information: 

a) Business cards 

b) Phone numbers 

c) Address books 

d) Email addresses 

e) Any cards with an electronic strip on it (hotel cards, grocery cards, gift cards, 
frequent flyer cards) 

0 Pre-paid phone cards 

g) Insurance cards 

h) Medical/Health insurance information 

1) Prescription information (e.g., doctor, pharmacy information) 
j) Sales receipts 

k) Any additional biographic or biometric identifiers to enhance 

identity matching of associates or family members with a person who is a POSITIVE 
MATCH to a KNOWN or SUSPECIEO TEKI^ORIST (as well as associates or family 
members referenced in interviews or documents carried by a person who is a 

POSri IVE MATCH to a KNOWN or SUSPliCTI'D I ERRORIST) 
I) Copies of identification documents obtained during the ENCOUNTER with a person 
who is a POSITIVE match to a known or suspected terrorist (e.g, passports, 
Seaman's Papers, Airman Certificates, driver's licenses, state identification cards, 
and similar government identification documents) 
m) Any computer, uniform resource locator (URL), or Internet protocol (IP) address 

information 
n) Calendars/schedulers 
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8. licenses, permits, membership cards, and application information: 

a) Membership cards (including library cards) 

b) Gun show applications, firearms license, concealed weapons permit, shooting club 
memberships 

c) HAZMAT license 

d) Explosives permit 

9. Tools or equipment information: 

a) Scuba gear 

b) Multiple cell phones 

c) Binoculars 

d) Peroxide 

e) Ammunition 

0 Camping fuel tabs 

g) Any dual use material that could be used for TERRORIST activity 

10. Financial information: 

a) Check book/individual or loose checks, including cashier's checks 

b) Bank account numbers 

c) Credit cards, especially those issued by U.S. banks and carried by non- U.S. 
PERSONS 

d) Tax records 

e) Business financial records 
0 Bank statements 

g) Cred it card or bi 1 1 i ng statements 

h) Ufility bills 

i) Anything with an account number 

j) Wire transfer information, including receipts from Money Service Businesses 
k) Denominations of money being carried (i.e., what country(ies) currency(ies) are 

they carrying), including, if possible, the serial numbers of currency carried 
I) Automated teller machine (ATM) receipts 
m) Ledgers 



1 1 . Electronic media/devices observed or copied: 

a) Cell phone list and speed dial numbers 

b) Laptop images 

c) GPS 

d) Thumb drives 

e) Disks 

0 iPodorMP3 

g) PDAs (e.g.. Palm Pilots, Trios) 

h) Kindle or iPad (electronic books) 

i) Cameras 

j) Video and/or voice recorders 
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k) Pagers 

I) Any electronic storage media 

12. Employment information: 

a) Pay stubs 

b) Employment applications 

c) Want ads 

d) Employer correspondence 

e) Access cards, badges 

13. Professional papers/Academic information: 

a) Resumes 

b) Academic transcripts 

14. Legal document information: 

a) Birth certificates 

b) Immigration and naturalization documents 

c) Marriage licenses 

d) Divorce decrees 

e) Adoption papers 

f) Living Wills 

g) Last Will and Testament 

h) Parking tickets 

i) Speeding tickets 

j) Property records (deeds) 

k) Summons 

I) Criminal documents or civil lawsuit information 

15. Miscellaneous item information: 

a) Long term storage facilities {e.g., access keys, codes) 

b) Social networking accounts (e.g., Facebook, Twitter, MySpace, Linkcdln, ICQ) 

c) Titles of books, DVD/CD, brochures being carried and their condition (e.g., new, 
dog-eared, annotated, unopened, professional journals) 

d) Letters, envelopes 

e) I .etters of I ntrod uction 

f) Animal information (e.g., vet or chip information) 
. ENCOUNTER MANAGEMENT ACTIONS 

5.12 Handling of ENc:oiiNTER PACKAGES. This section outlines the processes for handling and 
sharing encounter packagrs by SCREENERS, the TSC and NCTC. 

5.13 FBI/Law Enforcement encounters. TSOU coordinates the U.S. Government's response to 
an ENCOUNTER with a KNOWN or SUSPECTED TERRORIST. All collection of TERRORISM 
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iNr'OllMATlON during law enforcement ENCOUNTERS (e.g., traffic violations, investigations, 
arrests) are coordinated between the NOMINATING AGENCY and the ENCOUN l ERlNG AGENCY via 
I'SOU. 



5.13.1 For domestic and international ENCOUNTERS with a person who is a POSITIVE MATCH 
to a KNOWN or SUSPiXJTED TERRORISI , TSOU will do the following: After receiving 
notification of an liNCOUN l ER from the TSC, TSOU will disseminate and coordinate 
information to FBI operational entities and federal, state, and local law enforcement 
Agencies. TSOU simultaneously coordinates with the appropriate FBI Field Division(s) 
and Case Agent(s); Joint Terrorist I'ask Forces (JTTFs); Airport Liaison Agents and 
Attaches (ALAs); ;Lcgal Attaches (LEGATs); U.S. Embassies and/or other appropriate 
law enforcement officials, including ICE and CBP (specifically, N TC-P and NTC-C as 
appropriate); and appropriate members of the IC. For outbound ENCOUNTERS, or 
ENCOUN TERS involving subjects who have certain DliROGA lORY INIORMA I ION, TSOU 
contacts (via phone and electronic notification) the appropriate counterterrorism 
element(s). Especially sensitive ENCOUN l ERS often require coordination and situational 
updates with the White I louse. Northern Command (NORTl ICOM), and FBI's 
Counterterrorism- Watch. 



5.14 TSC Actions. TSC will update existing KNOWN or SUSPECTED TERRORIST records with new 
TERRORIST IDENTIFIERS and TERRORISM INPORMA TION and will provide the broader 
counterterrorism analytic community with as much new information as possible stemming 
from an ENCOUN TER with a KNOWN or SUSPEC TliD TERRORIS T. TSC's primary methods for 
sharing TERRORISM INFORMATION with the broader counterterrorism analytic community will 
be through its EMA application and the use of Intelligence Information Reports (IIRs), as 
described further in Section V, infra. TSC will also coordinate with Fusion Centers on law 
enforcement and other ENCOUN TERS impacting their Area of Responsibility. This 
coordination will include a request for record enhancing information from the Fusion Center, 
which if received, will be added to the subject's KNOWN or SUSPECTED TERRORIST record. 

5. 1 4. 1 Any new TERRORISM INFORMATION recorded in, or attached to an EMA record by 

TSC will be provided to NCTC via an automated ingest process. "^'^ Such daily ingests of 
EMA records update NCTC's TIDE to reflect the fact of the ENCOUN lER, any new 
identifiers used to confirm the KNOWN or SUSPEC TED TERRORIST posi tive ma tches, or 
those identified in an IIR. Once I IDE has been updated, an automated ingest from 
TIDE to TSDB is used to update the various TSDB subsets (e.g., No Fly or Selectee 
Lists). At this point, the process is complete and the watchlisting, screening and law 



An "automated ingest" is one where the contents of TSC's V.MA records are incorporated into NCTC's TIDE 
database via a system-to-systcin transferor information that identilles new or changed information. This process allows 
NCTC to spot KNOWN or SUSPlicrrr.DTFRRORlsr records that have been amended or updated. This process also 
accommodates the transfer of attached i-ncoun i 1'ACKAGi;s received from SCRFRNI-rs. In those in.stanccs, the 
ENCOUN i iiR I'ACKAGiiS appear as attachments to the known or susi'lic ted I'ERRORis l record. tNCOUN thr I'ackauis 
attachments must be moved to another system in order to give the broader counterterrorism community access to the 
TERRORISM INI'ORMATION. That process is described in Section V, infra. 
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enforcement communities have the most current and thorough TERRORISM ini-orma I ION 
available about a KNOWN or SUSPI-CTF.D I'l-RRORIST. Most — but not all — of that 
TElu<ORiSM INI ORMATION is available in a structured format as part of the known or 
SUSPECTED TERRORIS T record {e.g., discrete elements such as a date of birth, country of 
origin). The unstructured TERRORISM ini'ORMATION, while also in digitized format (e.g., 
a computer disk, a scanned image of a business card, an encountering officer's report), is 
handled by NCTC. 

5. 1 5 NCTC Actions. NCTC will post to TIDE Online any digitized ENCOUNTER PACKAGE it 
receives from TSC or directly from a SCREENER. llNCOUNTER PACKAGES can be found under 
the subject's main page. 

V. ROLES AND RESPONSIBILITIES FOR UPDATING EXISTING KNOWN 
OR SUSPECTED TERRORIST RECORDS AND NOMINATING NEW 
KNOWN OR SUSPECTED TERRORISTS BASED ON INFORMATION 
FROM POSITIVE ENCOUNTERS 

5.16 This section describes the roles and responsibilities of the watchiisting, screening, and 
counterterrorism communities for exploitation and analysis of the terrorism ini orma I ion 
lawfully collected and shared when there is a POSl l ivi; ma i cn to a KNOWN or SUSPEC TED 
TERRORIST. In this context the following definitions apply: 

5. 1 6. 1 "INITIAL REVIEW" means a quick review of the ENCOUNTER PACKAGE to identify 
obvious, new TERRORIST IDENTIFIERS about the KNOWN or SUSPECTED TERRORIST. 

5. 1 6.2 "ADVANCED ANALYSIS" means a thorough review of the terrorism ini orma TION 
contained in an ENCOUNTER PACKAGE obtained as a result of the ENCOUNTER with the 

KNOWN or suspected TERRORIST. ADVANCED ANALYSIS includes the adding of 
TERRORIS T IDENTll lERS to existing KNOWN or SUSPECTED TERRORIS T records and 
identifying new KNOWN or SUSPECTED TERRORISTS who should be nominated through 
the existing nomination process. In this context, ADVANCED analysis is being done on 
a tactical matter related to the specific known or SUSPECTED TERRORIST to identify 
information useful in "connecting the dots" between and among that KNOWN or 
SUSPECTED TERRORIST and other KNOWN or SUSPECTED TERRORIS TS or potential KNOWN 
or SUSPEC TED TiiRRORlS TS. It is also when the need for foreign language translation 
services will be identified. 

5. 16.3 "TARGETED ANALYSIS" means further exploitation of a targeted set of ENCOUNTER 
PACKAGES and ADVANCED ANALYSIS products to assist in identifying TERRORIS T trends 
and changes to methods, tactics, and practices, encoun ti;rs for targt:ti:d analysis 
are selected using contemporaneous threat criteria and research in additional 
repositories. Contemporaneous threat criteria includes association with a priority 
terrorist group (e.g., NIPF" Tier I or II); ENCOUNTERS with KNOWN or SUSPECTED 
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TERFWF^ISTS designated as No Fly or associated with violent activity; or at the request of 
any Department or Agency that identifies a need. 

5.17 Results of INITIAL REVH- W, ADVANCED ANALYSIS, and TARCKTED ANALYSIS efforts 

(collectively, "Exploitation") by Departments or Agencies will be reported to the watchlisting, 
screening and counterterrorism communities using standard templates when available. 

5. 1 7. 1 TSC Actions. 

5. 1 7. 1 . 1 First Stage Review. TSC actions with KNOWN or SUSPECTED TERRORIST 
ENCOUNTERS occur in two stages. The first .stage occurs when the encoun i lrino 
AGENCY and TSC exchange terrorist IDEN TIFIERS to determine whether the 
individual is watchlisted (i.e., a POSITIVE MATCH to a TSDB record). TSC records 
any new TERRORis i idi-;ntifiers provided during this stage in i'SC's EMA 
application. 

5. 1 7. 1 .2 Second Stage Review. The second stage occurs after TSC has confirmed 
there is a POsn IVE match to a known or susPECn-D terrorist. For each 

POSITIVE MA TCI I tO a KNOWN Or SUSPECTED TERRORIST, the TSC's Office of 
Intelligence (TSC/Ol) will generate an MR for dissemination to the 
counterterrorism community that provides a summary about the KNOWN or 
SUSPI-CTED TERRORIST ENCOUNTER (e.g., basic facts about the ENCOUNTER such as 
date, time, and place). If available at the time the initial IIR is prepared, TSC/OI 
will conduct an initial review of the encounti :r package and provide a 
thumbnail summary of the TERRORISM INI'ORMA l lON. For example, a summary 
might highlight the existence of a new KNOWN or SUSPECTED TERRORIST ("KNOWN 
or SUSPECTED TERRORIS T was traveling with three other associates not previously 
identified in the car where the explosives were found in a hidden compartment") or 
the possibility that new TERRORIST IDENTIFIERS are available ("approximately 80 
pages carried by the known or SUSPECTED TERRORIST were converted to electronic 
documents ranging from the KNOWN or SUSPECTED TERRORIST'S calendar/address 
book to bank account and credit card numbers"). 

5 .17.2 National Media Exploitation Center Actions. Much of the TERRORISM 

INFORMA TION generated by i;ncounters from a person who is a posi tive MATCH to a 
KNOWN or SUSPFC TED TliRRORlST is expected to be in a foreign language that may hinder 
prompt exploitation. The National Media Exploitation Center (NMEC) has the 
capability to translate foreign language information and the experience necessary to 
understand the efforts used to hide their activities. When TSC receives ENCOUNTER 
PACKAGES with information in a foreign language, or when NCTC receives them 
directly from an encountering agency, TSC or NCTC will forward/notify NMEC that 
it has the action to translate the ENCOUN TER PACKAGE. Once the ENCOUNTER PACKAGE 
has lx;en translated and returned to TSC and NCTC, the assigned roles and responsibility 
for exploitation will apply. 
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5. 1 7.3 FBI Actions. The majority of the FBI's ENCOUNTERS with KNOWN or SUSPECTED 
TF.RRORISTS occur in the United States. The FBI has ADVANCED analysis responsibility 
for encounter packages on KNOWN or SUSPECn-D T ERRORISTS for whom the FBI has 
an open investigation, no matter where the individual is encountered. If the FBI docs 
not have an open investigation on a KNOWN or SUSPECTED TERRORIST encountered in the 
United States, or if the KNOWN or SUSPECTED TERRORIST is a U.S. PERSON, then TSOU 
will send a lead directing the appropriate FBI field office to conduct an assessment of 
the individual and the ENCOUNTER circumstances to determine whether to open a 
preliminary or full investigation. This as.sessment includes advanced ANALYSIS 
packages when provided by liNCOUN l ERlNG AGENCIES. If no investigation is opened, an 
IIR will be sent to the NOMINA I'ING AGENCY and NCTC which will be used to enhance 
the TIDE record with additional FBI-derived information. 

5.17.4 DHS I&A Actions. DHS I&A has ADVANCED ANALYSIS responsibility for 

ENCOUNTER PACKAGES where the KNOWN or SUSPECn-D TERRORIS I is denied entry, 
denied hS'I'A, denied boarding, or is subject to a no board recommendation at a foreign 
location, or identified through ICE's visa security processes. 

5.17.5 NCTC Actions. On occasion, DOS, USAID, and foreign governments have 
ENCOUNTERS with KNOWN or SUSPECTED TERRORISTS, usually in the form of a record 
ENCOUNTER (e.g., the KNOWN or SUSPECTED TERRORIST has submitted an application for 
a benefit like a visa or grant or information is provided to the United States by a foreign 
government). NCTC has ADVANCED ANALYSIS responsibility for ENCOUNTER PACKAGES 
in these instances. 

5.17.5.1 For TARGETED ANALYSIS, NCTC offers this capability for a select set of 
ENCOUN n-R PACKAGi;s based on internal or interagency tasking. Since all 
ADVANCED ANALYSIS products created by FBI, DHS, orNC I C will be 
disseminated to the U.S. Government via an IIR, these materials are available to 
any organization seeking to further exploit specific i;nC0UNTERS. NC TC will 
leverage these ADVANCED ANALYSIS products as part of its typical intelligence 
analytic process to highlight emerging threats, issues or concerns. 

5.1 7.6 A chart depicting the roles and responsibilities by Department or Agency may be 
found at the end of this Chapter. 

. RESPONSIBILITY TO COORDINATE ANY ACTIONS 

CONTEMPLATED BASED ON INFORMATION FROM ENCOUNTERS 
WITH A KNOWN OR SUSPECTED TERRORIST 



Under governing authorities, the EBl can conduct "a.s.sessnients" for an authorized purpose, such as obtaining 
information about a threat to national security, without a particular factual predication. To open an investigation - 
whether a "preliminary" or "full" investigation - there must be a specillc factual predication. 
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5.18 Information Sharing MOU Requirements. Departments and Agencies are reminded of 
their agreement to provide transparency between and among tiiem with regard to their 
"activities to preempt, prevent, and disrupt rilRRORlSl attacks against U.S. im;rsons and 
interests.^'" As a practical matter, that type of transparency demands, to the greatest extent 
possible, prior coordination with affected Departments or Agencies before action within a 
Department or Agency's authorities is taken based on i errorism information from a person 
who is a POSITIVE MATCH to a KNOWN or SIJSPKCTEDTHRRORIST. For example, FBI, Central 
Intelligence Agency (CIA) or DOD, as lead countertcrrorism Agencies in their respective 
domains, must be consulted prior to taking any action based on l-NCOUN IT.RS with a person 
who is a I'OSmviv ma i cii with known or suspec ted terrorist. This guidance is subject to 
existing policies and coordination procedures when action against or pertaining to the KNOWN 
or SUSPECTED terrorist is contemplated. 

5.19 Requests for Withholding of Action. In certain circumstances, law enforcement or the IC 
may request that a SCREENER not take action (e.g., not to refuse the visa, to allow individual to 
enter the United States, to not deny an individual to obtain an immigration benefit or access to 
the secure area of an airport) although action may be taken under the law. This request, to the 
extent practicable, shall be in writing, by a senior official, and include a statement of 
justification and risk mitigation. Departments and Agencies will establish mutually 
acceptable processes and procedures to implement a detailed plan. 

VII. EXAMPLES OF TERRORISM INFORMATION TYPICALLY 
AVAILABLE FROM ENCOUNTERS 

5.20 The following examples of various types of encounters and the type of information typically 
generated from those ENCOUN ri-RS is offered to assist Departments and Agencies in 
understanding what additional or new information may become available as a result of 
following the guidance provided in this document. 

5.20. 1 Ports of Entry. Types of documents that could be included in the ENCOUNTER 
PACKACJi; typically include: 

1 . Business cards 

2. Copies of passport and visa entries 



See Paragraph 3(b) of the Infoimalion Sharing; MOV (Appendix 5): "Reciprocity and Transparency. All information 
collected by any entity relevant to the missions and responsibilities of any other covered entities should be shared, to the 
greatest extent possible, between and among all covered entities. Likewise, the parties agree that, to the greatest extent 
possible, there should be transparency between and among the covered entities with regard to their activities to preempt, 
prevent, and disrupt TL-RRORIST attacks against U.S. I'liRSONS and interests. Except as otherwise specified in this 
Agreement, or mandated by relevant l-ederal statutes or Presidential Directives, procedures and mechanisms for 
information sharing, u.se, and handling shall be interpreted and implemented consistently and reciprocally regardless of 
the role a particular covered entity plays as a provider or recipient of covered information. In other words, for example, 
international ri RRORiSM INHORMA I lON collected by the Border Patrol should be shared by DHS with the IC to the same 
extent foreign intelligence information on lliRRORiSM is shared by the IC with DHS." 
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3. Driver's license 

4. Resumes 

5. Conference literature 

6. Correspondence not in possession of the U.S. Postal Service. 

7. Letters of introduction 

8. Checks, bank deposit slips ^ 

9. Calendar/schedule 

1 0. Address book 

1 1 . Notepad entries 

12. M ari ncr' s certi llcates 

13. Telephone data 

14. Location and duration of previous travel stops on current or past travel 
itinerary 

5.20.2 Law Enforcement KNCOIJNTERS. Information collected from law enforcement 
ENCOUNTLRS with a pcrson who is a POSITIVE MA TCH to a KNOWN or SIJSPECTI-D 
Tl'RRORlsr can include any information that would be collected when a law enforcement 
officer speaks with a KNOWN or SUSPHCI ED tfrrorist. Typically information that 
could be included in the fiNCOUN rER PACKAGE can include, but is not limited to: 
I . Associates 



2. 


Telephone numbers (home, business, cell, pager, or fax) 


3. 


Other forms of identification 


4. 


Physical descriptors 


5. 


Family members 


6. 


Occupation and work history 


7. 


Travel plans or history 


8. 


Vehicle information 



5.20.3 Visa Applications. A typical DOS ENCOUNTER PACKAGE with a person who is a 

POSrriVE MA i CH to a known or suspf:ci ed i krrorist will be a visa application for 
entry to the United States, which identifies basic information about the encountered 
KNOWN or suspected terrorist and the encounter. Types of documents that could 
be included in the ENCOUN l ER PACKAGE typically include: 

1 . 1 lome and work address 

2. Copies of passport and visa entries 

3. National Identification Number (if applicable to the country) 

4. Phone numbers (home, business, cell, pager, or fax) 

5. Sponsorship information (when available, to include individual's 
name/Company/Government, address and contact information) 

6. Family member names (e.g., spouse, parents, children) 

7. Police Certificates (if applicable) 

8. Biometrics (Photos and Fingerprint Identification Number (1-IN)) 

9. Resumes (when applying for business visas) 
1 0. Letters of introduction 
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1 1. 


N/lilitjirv rplfltcfl rlf'*piimf*nt<; 


12 




I J. 


1 riur iravci 


14. 


Occupation and work history 


15. 


Financial information used to support visa application including bank 




statements, salary slips/letters, property records 


16. 


Photos 


17. 


Kmail addresses 



5.20.4 Applications or Petitions for Immigration Benefits. USCIS may receive an 
application from an alien for immigration benefits or petitions. Depending on the 
completed form, USCIS may have information from the following non-exhaustive 
categories: 



1 . Residences domestic and foreign 

2. Family Members (often extended family) 

3. Occupation 

4. Bank account information 

5. Biometrics 

6. Gender 

7. Identity documents 

8. Travel document information (and 1-94) 

9. Civil documents— POB, COC data 

1 0. Fmploycr/Prospective Employer 

1 1 . Religious Affiliations 

12. Resumes 

13. Educational Background 

14. Past marriages or divorces 

15. Biographical Information 



5.20.5 ENCOUNTERS by HSPD-6 Foreign Partners. On some occasions, and based on the 
arrangement with and legal authorities of the particular foreign partner involved, an 
I'NCOUNTRR PACKAGH may include the known or susi'iiCi ED TKRRORiST's visa 
application to a foreign partner. One such student visa/permit application to a foreign 
partner could include information provided from the KNOWN or SUSPLCI ED I I-RRORIST in 
the following categories: 



1 . Name as shown in passport 

2. Other names known by or ever known by 

3. Name in ethnic script 

4. (jender 

5. Date of birth 

6. Town/city of birth 

7. Country of birth 
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8. F'assport number, country, expiration date 

9. Country of citizenship 

10. Other citizenships held 

1 1 . Residential address and telephone number in home country 

1 2. Local residential address and telephone number (ifalready in country) 

1 3. Name and address for communication about this application 

14. Name and address of friends, relatives, or contacts you have in the country (if 
applicable) 

1 5. All periods of employment, including self-employment (to/from dates, name of 
employer, location, type of work/occupalion/job title) 

16. Financial information used to support visa application including bank 
statements, salary slips/letters, and property records 

17. Length of planned stay in country 

1 8. Questions concerning the person's character (e.g., whether the person has ever 
been convicted, charged, or under investigation for any offense(s) against the 
law in any country; ever deported, excluded or refused a visa by/removed from 
any country; and police certificates (as evidence of character) from home 
country or countries of citizenship and from all countries where the person has 
lived for five or more years since age 1 7) 

1 9. Whether the application is for a student visa, a student permit, or a limited 
purpose visa 

20. Whether the application is for a variation of conditions to work 
2L Course of study and details of the course(s) enrolled 

22. Arrangements for outward travel from host country 

23. Name of legal guardian, other names legal guardian is known by, and 
relationship (e.g., mother, father, legal guardian) 

24. Any national identity number or other unique identifier issued by a government 

25. Any completed military service (e.g., from/to dates, rank, unit name or number, 
role) 

26. Whether presently subject to military service obligation in any country 

27. Any association with any intelligence agency or group, or law enforcement 
agency 

28. Any association with any group or organization that has used or promoted 
violence to further their aims 

29. Any involvement in war crimes, crimes again.st humanity, and/or human rights 
abuses 

30. Payment method for application fee (e.g., bank check/draft, credit card, or 
personal check) 

VIII. OBTAINING ENCOUNTER INFORMATION THROUGH TSC'S DAILY 
ENCOUNTER REPORTS 

5.21 In addition to the aforementioned TSC/Ol IIRs following an ENCOUN l l-R with a person who is 
a POSITIvr- MATCH to a known or suspected terrorist, Agencies can obtain the Daily 
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Summary Report (DSR) to assist them in identifying ENCOUNTERS of interest to their 
organizational missions. DSRs will contain as much information as legally permissible. 
DSRs are available from the following locations: 

5.2 1 . 1 On the Secret Internet Protocol Router Network (SIPRNET), wwvv.fhi.siiov.gov/ , 
click on the " I SC Intel Daily Summary Reports" link on the right side. 

5.21.2 On I ^aw Enforcement Online (LEO) via www.leo.f^ov 

5.2 1 .3 On Regional Information Sharing Systems via www.riss.net 

5.2 1 .^^^ I IS SLIC (for access contact state or local fusion center) or email: 

5.2 1 .5 Two sources on FBINet: 

5.21.5.1 TSC's homepage at httr)://home.fhinet.lbi/nsb/tsc/Patzes/Defauit.aspx 

5.21 .5.2 Current Intelligence Report at http://di.fbinet.tT3i/ims/ciu/cir0/ 
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A. ADVANCED ANALYSIS: is a thorough review of the tkrrorism information contained in an 
ENCOUNTER PACKAGE obtained as a result of the F.NCOIJNTER with the known or suspected 
TERFiORis r. ADVANCED ANALYSIS includes thc adding of terrorist identifiers to existing 
KNOWN or SUSPECTFT) TERRORIST records and identifying new KNOWN or SUSPECTF-D 
TERRORIS IS who should be nominated through the existing nomination process. In this context, 
ADVANCED ANALYSIS is being done on a tactical matter related to the specific KNOWN or 
SUSPECTED I ERRORis r to identify information useful in "connecting the dots" between and 
among that known or SUSPECTED ri;RRORis r and other known or suspected n-RRORis rsor 
potential KNOWN or SUSPEC ted i errorists. it is also when the need for foreign language 
translation services will be identified. 

B. AGGREGATORS: are those who receive and hold TERRORISM INFORMATION and certain other 
non-TERRORlSM INFORMATION they are authorized to receive and retain. 

C. DEROGATORY INFORMATION: is intelligence or information that demonstrates the nature of an 
individual's or group's association with TERRORISM and/or TERRORIST ACTIVITIES. 

D. ENCOUNTER: is an event in which an individual is identified during a screening process to be a 
"POSITIVE MA I CI I," "PO TENTIAL MA TCH," or "iNCONCLUSivi- MA TCH," to an individual who has 
been designated in the TSDB as a KNOWN or SUSPECTED TERRORIST. An ENCOUN l i-lR can be a 
face-to-face meeting with a KNOWN or SUSPECTED TERRORIS T, electronic or a paper-based 
ENCOUN Ti:r {e.g., thc known or suspec ted terrorist has submitted an application for a 
benefit liked a visa, EISA grant, or information is provided to the United States by a foreign 
government, aircraft operator, or other private entity). 

E. encountering agency: is a Department or Agency of the U.S. Government with terrorist 
screening or law enforcement responsibilities that comes into contact with a KNOWN or 
SUSPi:CTED TERRORIST (whether in a face-to-face situation or via an electronic or written 
submission such as an application for a benefit) that the TSC determines is a posi tive MATCH to 

a KNOWN or SUSPIX:TED Tl'RRORIS I . 

F. ENCOUNTER PACKAGE: is all information gathered during an ENCOUNTER with a KNOWN or 
SUSPECTED TERRORIST. 

G. ENHANCEMEN T: is the addition of new TERRORIS T IDEN TIFIERS or DEROGATORY INFORMATION 

on a KNOWN or suspecti;d terrorist. 

H. foreign fighters: are nationals of one country who travel or attempt to travel to another 
country to participate in TERRORISM and/or lERRORlS T activi ties. 

I. FRAGMENTARY INFORMATION: is information that suggests an individual may have a nexus to 
TERRORISM and/or ti;rroris t activities but the information available to the nomina ior does 
not meet either or both the minimum identifying criteria that will facilitate identification of 
these individuals or the substantive DI:roga'TORY informa HON to meet the REASONABLE 
SUSPICION standard but does qualify as information that should be provided to NCTC pursuant 
to HSPD-6. 
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J. INCONCLUSIVE MATCH: is the final determination by TSC that limited information in the subject 
data set matches TSDB data in a TSDB record and no additional identifiers are available to 
verify the match. 

K. INITIAL REVIEW: is a quick primary review of the ENCOIJNTKR PACKAGE to identify obvious, 
new Ti-RRORisi IDEN rir iERS about the known or suspected terrorist. 

L. KNOWN terrorist: is an individual whom the U.S. Government knows is engaged, has been 
engaged, or who intends to engage in TERRORISM and/or TERRORIST ACTivi i Y, including an 
individual (a) who has been, charged, arrested, indicted, or convicted for a crime related to 
l ERRORiSM by U.S. Government or foreign government authorities; or (b) identified as a 
terrorist or member of a designated foreign terrorist organization pursuant to statute. Executive 
Order or international legal obligation pursuant to a United Nations Security Council 
Resolution. 

M. LONE WOLF: an individual motivated by one or more extremists ideologies, who operates alone 
and supports, or engages in acts of violence in furtherance of that ideology or ideologies that 
may involve direction, assistance, or influence from a larger terrorist organization of a foreign 
actor. 

N. NOMINATOR or NOMINATING DEPARTMENT OR AGENCY: is a Federal Department or Agency 
that has information to indicate that an individual meets the criteria for a KNOWN or SUSPECTED 
TERRORIST and nominates that individual to TIDR and the TSDB based on information that 
originated with that Department or Agency and/or a third Department or Agency. 

O. OPERATIONALLY CAPABLE: as described in Chapter 4, an individual is "OPERATIONALLY 
CAPABLE" if, based on credible intelligence, he or she, acting individually or in concert with 
others, reasonably appears to have the ability, knowledge, opportunity, and intent or is actively 
seeking the opportunity to engage in a violent act of TliRRORlSM consistent with 1 8 U.S.C. 233 1 
or 18 U.S.C. 2332b. For example, attempting to obtain an lED would indicate an individual is 
OPERA TIONALLY CAPABLE of committing an act of TERRORISM. However, simply conducting 
internet research concerning IliDs would not be sufficient without additional activity. 
Depending on circumstances, and in combination with other facts, scouting potential targets or 
traveling for no legitimate purpose to places that have I IIRRORISI training grounds, regardless of 
whether the person is presently capable of using an lED, might also indicate an individual is 
OPERATIONALLY CAPABLE of committing an act of TERRORISM. 

P. ORIGINATOR: is the Department or Agency that has appropriate subject matter interest and 
classification authority and collects TERRORISM INI-ORMA'IION (i.e., raw information) and 
disseminates it or terrorist iden hi'IHRS to other U.S. Government entities in an intelligence 
report (i.e., finished intelligence) or other mechanism. 

Q. PARTICULARIZED DEROGATORY INFORMATION: is the type of information relied on to 

determine whether RI;aS0NABLE suspicion is met. This is information that demonstrates the 
nature of an individual's or group's association with TERRORISM and/or TERRORIS I AC TIVI TIES 
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that is descriptive and specific to an event or activity, and is more than a label. For example, 
"Subject X provides false travel documentation for Al-Qaida operatives" is particui.arizkd 
DKROGA roRY INIORMAI ION, whereas "Subject Visa supporter," standing alone, is not 
considered PARI ICULARIZliD DEROGATORY INI ORMATION. 

R. POSITIVE match: occurs when the TSC determines that information about a subject 
encountered by a screeN[:r exactly or reasonably matches a record in the TSDB. 

S. POTKN TIAL MATCH: occurs when an ENCOIWIRRING AGENCY believes it has a match with a 
KNOWN or SUSI'i;cri;i) IERRORIST record in the rSDB. An l-NCOUN I I-RING AGIINCY may attempt 
to resolve POTRN riAL ma tches first through its review process. If an i;nC0UNT I-.ring AG1;ncy'S 
review process cannot resolve the individual's status as not a match to a TSDB record, the 
ENCOUN TERING AGENCY will refer the POTENTIAE MATCH to TSC for final adjudication. 

T. PURELY DOMESTIC TERRORISM INFORMATION: is defined in the TSC MOU as information 
about U.S. PERSONS that has been determined to be purely DOMESTIC TERRORISM INFORMATION 
with "no link to foreign intelligence, counterintelligence, or international TERRORISM." 

U. REASONABLE SUSPICION: is the standard that must be met in order to include an individual in 
the TSDB, absent an exception provided for in the Watchlisting Guidance. To meet the 
REASONABLE SUSPICION standard, the NOMINATOR, based on the totality of the circumstances, 
must rely upon articulable intelligence or information which, taken together with rational 
inferences from those facts, reasonably warrants a determination that an individual is known or 
suspected to be or has been knowingly engaged in conduct constituting, in preparation for, in aid 
of, or related to TERRORISM and/or TERRORIST AC TIVTTIES. There must be an objective factual 
basis for the NOMINATOR to believe that the individual is a KNOWN or SUSPECTED TERRORIST. 
Merc guesses or hunches are not enough to constitute a RiiASONABLE SUSPICION that an 
individual is a KNOWN or SUSPECTED TERRORIS T. Reporting of suspicious activity alone that 
does not meet the REASONABLE SUSPICION standard set forth herein is not a sufficient basis to 
watchlist an individual. The facts, however, given fair consideration, should sensibly lead to the 
conclusion that an individual is, or has, engaged in TERRORISM and/or TERRORIST activities. 

V. SCREENER: a Department or Agency that is authorized to conduct TERRORISM screening to 
determine if an individual is a possible match to a KNOWN or SUSPECTED TERRORIS T in the 
TSDB. SCREENERS can include Federal Departments or Agencies, state, local, tribal, territorial, 
or foreign governments and certain private entities. The term 'SCREENER' is used throughout 
this document as a general reference to a government official who compares an individual's 
information with information in the TSDB to determine if an individual is in the I SDB. Law 
enforcement officials who engage in such activities may normally describe their targeting or 
other actions in this context as other than "screening." For case of reference, government 
officials who compare an individual's information with information in the TSDB will be 
referred to in the Watchlisting Guidance as a "scret:nt;r." 

W. SUSPECTED TERRORIST: is an individual who is reasonably SUSPECTED to be, or has been 
engaged in conduct constituting, in preparation for, in aid of, or related to TERRORISM and/or 
TERRORIS T AC TIVTTIES based on an articulable and REASONABLE SUSPICION. 
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X. TARGETED ANALYSIS: is further exploitation of a targeted set of ENCOUNTF.R packages and 
ADVANCED ANALYSIS products to assist in identifying I HRRORIST trends and changes to methods, 
tactics, and practices, encounters for I ARCiETi;D ANALYSIS are selected using 
contemporaneous threat criteria, and research in additional repositories. Contemporaneous 
threat criteria include association with a priority terrorist group (e.g., NIPF Tier I or 11); 
ENCOUN l ERS with KNOWN or SUSPEC TED l ERRORlSTS designated as No Fly or associated with 
violent activity; or at the request of any Department or Agency that identifies a need. 

Y. TERRORISM and/OR TERRORIST ACTIVITIES: is a combination of definitions because none of 
the federal law definitions of "terrorism" or "terrorist activities" were directly applicable to the 
consolidated approach to watchlisting. For terrorist watchlisting purposes under this 
Watchlisting Guidance, "terrorism and/or terrorist activities" combine elements from various 
federal definitions and are considered to: (a) involve violent acts or acts dangerous to human 
life, property, or infrastructure that may be a violation of U.S. law, or may have been, if those 
acts were committed in the United States; and, (b) appear intended to intimidate or coerce a 
civilian population, influence the policy of a government by intimidation or coercion, or affect 
the conduct of government by mass destruction, assassination, kidnapping, or hostage-taking. 
This includes activities that facilitate or support ti;rrorism and/or TERRORIST activities, such 
as providing a safe house, transportation, communications, funds, transfer of funds or other 
material benefit, false documentation or identification, weapons (including chemical, biological, 
or radiological weapons), explosives, or training for the commission of act of terrorism and/or 

TERRORIS T ACTIVri Y. 

Z. TERRORISM INFORMATION: applies, where appropriate, to purely domestic terrorism as defined 
in the TSC MOU and incorporates the definition found in in section 1016 of the IRTPA (6 
U.S.C. 485), as amended. I he term " lERRORlSM INFORMAI ION" means - 

1 . all information, whether collected, produced, or distributed by intelligence, law 
enforcement, military, homeland security, or other activities relating to — 

a) the existence, organization, capabilities, plans, intentions, vulnerabilities, 
means of finance or material support, or activities of foreign or 
international terrorist groups or individuals, or of domestic groups or 
individuals involved in transnational TERRORISM; 

threats posed by such groups or individuals to the United States, U.S. 
PERSONS, or United States interests, or to those of other nations; 

communications of or by such groups or individuals; or 

groups or individuals reasonably believed to be assisting or associated with 
such groups or individuals; and 

weapons of mass destruction information. 

Weapons of Mass Destruction Information: information that could 
reasonably be expected to assist in the development, proliferation, or use of 
a weapon of mass destruction (including a chemical, biological, 



b) 

c) 
d) 

2. includes 
a) 
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radiological, or nuclear weapon) that could be used by a TERRORIST or a 
terrorist organization against the United States, including information about 
the location of any stockpile of nuclear materials that could be exploited for 
use in such a weapon that could be used by a TliRRORlS T or a terrorist 
organization against the United States. 

AA. TRRRORISM SCREENING INFORMATION: is defined in the standard HSPD-6 agreement to 
mean unclassified identifying information about KNOWN or SUSPECTED lERRORls rs. 

BB. TERRORIST: please see KNOWN TERRORIST or SUSPECTED TERRORIST. 

CC. TERRORIST IDENTIFIERS: are referred to in the TSC MOU as U//FOUO data for inclusion 
into the TSDB. TERRORIST iden tifiers are data points about a particular identity that include 
names and aliases, dates of birth, places of birth, unique identifying numbers, passport 
information, country of origin and nationality, physical identifiers, addresses, photographs or 
renderings of the individual, fingerprints or other biometric data, employment data, license plate 
numbers, and any other TERRORISM INI ORMA TlON that ORIGINA TORS specifically provide for 
passage to the TSC. 

DD. TERRORIST INFORMATION: as defined in HSPD-6 is "information about individuals known 
or appropriately suspected to be or have been engaged in a)nduct constituting, in preparation 
for, in aid of, or related to TERRORISM." 

EE. U.S. PERSON: is defined in Executive Order 12333 (as amended) as "a United States citizen, 
an alien known by the intelligence element concerned to be a permanent resident alien, an 
unincorporated association substantially composed of United States citizens or permanent 
resident aliens, or a corporation incorporated in the United States, except for a corporation 
directed and controlled by a foreign government or governments." The Watchlisting Guidance 
contains certain exceptions to the minimum substantive derogatory standards for TERRORIST 
watchlisting that support immigration and visa screening activities by the DHS and DOS to 
determine whether ineligibilities exist for admission to the United States or visa adjudication 
pursuant to the INA. Because the INA defines "aliens" as any person not a citizen or national of 
the United States, the INA admissibility provisions also apply to LPRs, in certain circumstances, 
who are considered as U.S. PERSONS under Executive Order 12333. Consequently, NC TC 
developed a mechanism in TIDE to identify and distinguish U.S. citizens from non-U. S. citizens 
in order to further distinguish between "aliens" under the FNA and U.S. PERSONS under 
Executive Order 12333. See INA § 101(a)(3) [8 U.S.C. 1 101(a)(3)]. 



UNCLASSIFIED//FOR OFFICIAL USE ONLY/SENSITIVE SECURITY INFORMATION 



For Immediate Release 
Office of the Press Seaelary 
September 16. 2003 

Homeland Security Presidential Directive/Hspd-6 
Subject: Integration and Use of Screening Information 

To protect against terrorism it is the policy of the United States to (1 ) develop, integrate, and maintain 
thorough, accurate, aid current infonnation about individuals known or appropriately suspected to be or 
have been engaged in conduct constituting, in preparation for, in aid of or related to terrorism (Terrorist 
Information), and (2; use that information as appropriate and to the full extent permitted by law to support 
(a) Federa . State. Icoal, terntoriai, tnbal, foreign -government, and private-sector screening processes, 
and (b) diplomatic, military, intelligence, law enforcement, immigration, visa, and protective processes. 

This directive shall be implemented in a manner consistent with the provisions of the Constitution and 
applicable laws, including those protecting the rights of all Americans. 

To further strengthen the ability of the United States Government to protect the people, property, and 
territory of the United States against acts of terrorism, and to the full extent permitted by law and 
consistent with the policy set forth above: 

(1) The Attorney General shall establish an organization to consolidate the Government's approach to 
terronsm screening and provide for the appropnate and lavrful use of Tenrorist Information in screening 
processes. 

(2) The heads of executive departments and agencies shall, to the extent penmitted by law provide to the 
Terrorist Threat Integration Center (TTIC) on an ongoing basis ail appropriate Terronst Information m their 
possession, custody' or control. The Attorney General, in coordination with the Secretary of State, the 
Secretary of Homeland Security, and the Director of Central Intelligence shall implement appropriate 
procedures and safeguards with respect to all such information about United States persons. The TTIC 
will provide the organization referenced in paragraph (1) with access to all appropriate information or 
intelligence in the TTIC's custody, possession, or control that the organization requires to perform its 
functions. 

(3) The heads of executive departments and agencies shall conduct screening using such information at 
all appropriate opportunities, and shall report to the Attorney General not later than 90 days from the date 
of this directive, as to the opportunities at which such screening shall and shall not be conducted. 

(4) The Secretary of Homeland Security shall develop guidelines to govern the use of such information to 
support State, local, terntoriai, and tribal screening processes, and private sector screening processes 
that have a substantial bearing on homeland security. 

(5) The Secretary of State shall develop a proposal for my approval for enhancing cooperation with 
certain foreign governments, beginning with those countries for which the United States has waived visa 
requirements, to establish appropriate access to terrorism screening information of the participating 
governments 

This directive does not alter existing authorities or responsibilities of department and agency heads to 
carry out operational activities or provide or receive information This directive is intended only to improve 
the internal management of the executive branch and is not intended to. and does not. create any right or 
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benefit enforceable at law or in equity by any party against the United States, its departments, agencies, 
entities, officers, enrioloyees or agents, or any other person. 

The Attorney General, in consultation with the Secretary of State, the Secretary of Homeland Security, 
and the Director of Central Intelligence, shall report to me through the Assistant to the President for 
Homeland Secunty not later than October 31 . 2003, on progress made to implement this directive and 
shall thereafter repor. to me on such progress or any recommended changes from time to time as 
appropriate. 

GEORGE W BUSH 



### 
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THE SECRETARY OF STATE 
THE ATTORNEY GENER.AL 
THE SECRETARY OF HOMELAND SECURITY 
THE DIRECTOR OF CENTRAL INTELLIGENCE 



MEMORANDUM OF UNDERSTANDING 
ON THE INTEGRATION AND USE OF SCREENING INFORMATION 
TO PROTECT AGAINST TERRORISM 

(1) This memorandum represents the consensus view of the Secretary of State, the Attorney 
General, the Secretary of Homeland Security, and the Director of Central Intelligence- regarding 
the implementation of Homeland Security Presidential Directive-6 (HSPD-6), dated 
September 16. 2003. entitled "Integration and Use of Screening Information to Protect Against 
Terrorism." (U) 

(2) Consistent with the President's direction, the Parlies to this Memorandum will develop and 
maintain, to the extent permitted by law, the most thorough, accurate, and current information 
possible about individuals known or appropriately suspected to be or have been involved in 
activities constituting, in preparation for, in aid of, or related to terrorism ("Terrorist 
Information"), and will, as described in this Memorandum: 

(a) use that information to support screening processes at all appropriate opportunities; 

(b) make accessible appropriate information to State, local, territorial, and tribal authorities to 
support their screening processes and otherwise enable them to identify, or assist in identifying, 
such individuals; 

(c) host mechanisms, to the extent permined by law, to support appropriate private sector 
screening processes that have a substantial bearing on homeland security; 

(d) host mechanisms, to the extent permitted by law, to support appropriate foreign government 
screening processes that have a substantial bearing on homeland security; 

(e) provide or make accessible appropriate mformation to foreign governments cooperating with 
the United States in the war on terrorists of global reach; and 

(f) ensure that these activities are carried out in a manner consistent with the Constitution and 
applicable laws. (U) 
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Terrorist Screening Center 

(3) To implement the President's directive, the Attorr.cy General, acting through the Direcior of 
the FBI, and in coordination with the Secretary of State, the Secretary of Homeland Security, and 
the Director of Centra! Intelligence, will establish the Terrorist Screening Center to consolidate 
the Government's approach to terrorism screening and provide for the appropriate and lawful use 
of Terrorist Information, in screening processes. (U) 

(4) The Terrorist Screening Center will: 

(a) maintain a consolidated terrorist screening database that is a continuously updated, sensitive 
but unclassified subset of the Tenonst Information possessed by the TTIC, and the Purely 
Domestic Terrorism Information (i.e., information about U.S. persons thai has been determined 
to be purely domestic terrorism information vwth no link to foreign intelligence, 
counterintelligence, or international terrorism) possessed by the FBI; 

(b) determine, for each entry in the consolidated tenonst screening database, which supported 
screening processes shall query that entry, as described in paragraphs (15) through (24); 

(c) ensure, consistent with applicable law, that appropriate information possessed by State, local, 
territorial, and tribal governments, which is available to the Federal government, is considered in 
determinations made by the Terrorist Screening Center; 

(d) host mechanisms to support appropriate screening processes; and 

(e) provide continual operational support to assist in the identification of persons screened and, 
when an individual knovwi or appropriately suspected to be involved in activities constituting, in 
preparation for, in aid of, or related to terrorism, has been identified through a screening process, 
facilitate, to the extent pemiitted by law, appropriate and lav^^ul actions to be taken by 
appropriate departments and agencies. (U) 

(5) The Terrorist Screening Center will be headed by a senior U.S. Government official (the 
Director of the Terrorist Screening Center), who will report to the Attorney General through the 
Director of the FBI. The Director of the Terrorist Screening Center will be appointed by the 
Anomey General, in consultation with the Secretary of Homeland Security, the Secretary of 
State, the Director of the FBI, and the Director of Central Inlelligence. The Principal Deputy 
Director of the Terrorist Screening Center will be a senior official from the Department of 
Homeland Security. (U) 

(6) The Terronst Screening Center will be staffed with assignees and other officials from the 
Department of State, the Department of Justice, the Department of Homeland Security, and other 
Federal departments and agencies that the Terrorist Screening Center supports. The Director of 
Central Intelligence, acting in his capacity as statutory head of the Inlelligence Community, may 



also determine that assignees of other appropriate agerjcics. within the Intelligence Communily. 
will be made available to perform appropriate duties at the Terrorist Screening Center. (U) 

(7) Personnel assigned to the Terrorist Screening Center will have appropriate access to the TTIC 
database and any relevant intelligence information necessary to perform the Terrorist Screening 
Center's functions. To the extent required by law, the Parlies to this Memorandum may jointly 
determine the circumstances under which personnel from the Intelligence Community, assigned 
to the Terrorist Screening Center in accordance with paragraph (6), may participate in the 
functions of the Terrorist Screening Center relating to U.S. persons. (U) 

(8) The Director of the Terrorist Screening Center will establish necessary procedures and 
safeguards to ensure the Terrorist Screening Center's functions are carried out in a manner 
consistent with the Constitution and applicable laws, including, but not limited to, procedures to: 

(a) address the repeated misidentiftcation of persons in any U.S. Govemnnent screening process; 

(b) regularly review information, and to promptly adjust or delete erroneous or outdated 
information; and 

(c) protect personal privacy, (U) 

(9) Consistent with the President's directive, the Secretary of State, in consultation with the 
Secretary of Homeland Security, the Attorney General, and the Director of Central Intelligence, 
and working with the Director of the Terrorist Screening Center, not later than 1 80 days from 
today, will rcconunend to the President through the Assistant to the President for Homeland 
Security and the Assistant to the President for National Security Affairs, a proposal for 
cooperating with certain foreign governments (bcgirming with those countries for which the 
United States has waived visa requirements) to establish appropriate access to terrorist screening 
information of the participating govemmcnts, in a manner consistent with each government's 
laws, and to provide operational support to the participating governments. (U) 

Terrorist Threat Integration Center (TTIC) Identities Database 

(10) The TTIC database will include, to the extent permitted by law, all information the U.S. 
government possesses related to the identities of individuals known or appropriately suspected to 
be or have been involved in activities constituting, in preparation for, in aid of, or related to 
terrorism, with the exception of Purely Domestic Terrorism Information. (U) 

(11) As directed by the President, and to the extent permitted by law. Federal departments and 
agencies will provide to the TTIC on an ongoing basis all relevant Terrorist Information in their 
possession, custody, or control, with the exception of Purely Domestic Terrorism Information, 
which will instead be provided directly to the FBI. Departments and agencies will continue to 
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provide new or updated information, and adjust or retract infonnation as needed, in as near to 
real time as possible. To this end. the Parties to this Memorandum will automate, to the 
maximum extent possible while providing for necessary review, their processes and mechanisms 
for securely sharing this information, including, but not limited to, the following: 

(a) The Secretary of State, the Attorney General, the Secretary of Homeland Security, and the 
Director of Central Intelligence, in coordination with other relevant department and agency 
heads, not later than 1 80 days from today, will jointly recommend to the President through the 
Assistant to the President for Homeland Security, in consultation with the Assistant to the 
President for National Security Affairs, improvements, if any, to the existing cable-based system 
of sharing terrorism-related information with other departments and agencies. 

(b) The Attorney General will ensure that the FBI's information technology modernization 
programs incorporate automated means of sharing appropriate information with the TTIC and 
other departments and agencies, while providing for necessary review, in near real-time. (U) 

(12) The TTIC identities database, and the FBI's database containing Purely Domestic Terrorism 
Information, will incorporate, to the extent permitted by law, available biometric data, including 
data on persons who even if otherwise unidentified are known or appropriately suspected to be or 
have been involved in activities constituting, in preparation for. in aid of, or related to terrorism. 
The databases will have the capability of periodically incorporating advancements in biometric 
technology. (U) 

Relationship of the TTIC and FBI Databases to the Terrorist Screening Center Terrorist 
Screening Database 

(13) The TTIC identities database will serve, with the exception described in paragraph (10), as 
the single source for the Terrorist Screening Center terrorist screening database. The Director of 
the FBI will serve as the source for the Terrorist Screening Center terrorist screening database 
with regard to Purely Domestic Terrorism Information. The Terrorist Screening Center terrorist 
screening database will be a continuously updated, sensitive but unclassified subset of the 
Terrorist Information possessed by the TTIC. and the Purely Domestic Terrorism Inibnnation 
possessed by the FBI. (U) 



Terrorist Screening Center Terrorist Screening Database 

(14) The Director of the TTIC, the Director of the Terrorist Screening Center, and the heads of 
Federal departments and agencies, or their designees, may nominate persons for inclusion in the 
tenorist screening database, with notification, as appropriate, to the Director of the TTIC and/or 
the Director of the FBI. (U) 
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(15) The Terrorist Screening Center will determine, according to criteria established jointly with 
the entity responsible for each supported screening process, which supported screening processes 
will query that entry in the consolidated terrorist screening database. The Terrorist Screening 
Center will make these determinations based on criteria and procedures developed in 
coordination with the Parties to this Memorandum and in consultation with the heads of 
appropriate Federal departments and agencies, based on factors including, but not limited to, the 
following: 

(a) the nature of the person's association with terrorism; 

(b) the quality of the data, including credibility, reliability, and extent of corroboration; 

(c) the extent of uniquely identifying data; 

(d) the authority or authorities under which the data was obtained, and any restrictions on how it 
may be shared or used; 

(e) the authority or authorities of the screening entity; 

(f) the circumstances, including changes in the Homeland Security Alert Level, under which 
screening will occur; and 

i&) action the screening entity will take if a person is identified as a person in the terrorist 
screening database. (U) 

(16) The Director of the Terrorist Screening Center, in coordination with the Parties to this 
Memorandum and in consultation with the heads of appropriate Federal departments and 
agencies, will establish procedures to review the continued inclusion of a person in the terrorist 
screenmg database, and to review the inclusion of that person in particular screening processes as 
described in paragraph (1 5) above, whenever new information about that person is developed. 
(U) 

(17) Except upon written direction fi-om the President, determinations to include U.S. persons in 
the terrorist screening database based solely on information concerning the domestic activities of 
such persons will be made as appropriate by the Secretary of State, the Attorney General, and the 
Secretary of Homeland Security, or their designees. (U) 

(1 8) The Attorney General, acting through the Director of the Terrorist Screening Center, will 
review each nomination and determine whether to include that person in those records that can 
be queried by law enforcement authorities through the NCIC database; for aliens, the Attorney 
General will do so in consultation with the Secretary of Homeland Security, acting through the 
Secretary of Homeland Security's representative assigned to the Terrorist Screening Center. (U) 
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(19) The Secretary of Homeland Security, acting through his representative assigned to the 
Terrorist Screening Center, will review each nomination and determine whether to include that 
person in those records that can be queried by, or made accessible by appropriate means, to other 
Slate, local, territorial, and tribal officials for homeland security purposes, including, but not 
limited to, screening persons when they apply for driver's licenses or other fonns of 
identification. (U) 

(20) The Secretary of Homeland Security, acting through his representative assigned to the 
Terrorist Screening Center, will review each nomination and determine whether to include that 
person in those records that will be subject to queries submitted by appropriate private sector 
critical infrastructure operators or organizers of large events. The Secretary of Homeland 
Security, in consultation with the other Parlies to this Memorandum, and working with the 
Director of the Terrorist Screening Center, will establish necessarj' guidelines and criteria to: 

(a) govern the mechanisms by which private sector entities can submit such queries; and 

(b) initiate appropriate law enforcement or other governmental action, if any, when a person 
submitted for query by a private sector entity is identified as a person in the terrorist screening 
database. (U) 

(21) The Secretary of State in consultation with the Attorney General, the Secretary of Homeland 
Security, and the Director of Centra! Intelligence, acting through their representatives assigned to 
the Terrorist Screening Center, vnU review each nomination and determine whether to include 
that person in those records that can be queried by, or made accessible by appropriate means to, 
foreign governments cooperating with the United States in the war on terrorists of global reach. 

[Paragraphs (22) - (24) are classified and therefore redacted] 

(25) The terrorist screening database will be accessible to screening processes on a real-time 
basis. Screening processes will only be able to access those records that have been identified and 
approved for such screening, as described in paragraphs (1 5) through (24) above. The Director 
of the Terrorist Screening Center will strictly limit, to the maximum extent possible, the need to 
provide U.S. Government terrorist screening data in list form to supported entities. (U) 

Additional Implementation Provisions 

(26) Per the President's direction, and consistent with guidelines developed by the Attorney 
General in coordination with the other Parties to this Memorandum, the heads of Federal 
departments and agencies will conduct screening using the Terrorist Screening Center database 
at all appropriate opportunities, and shall report to the Attorney General not later than 90 days 
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from today the screening opportunities at which such screening shall and shall not be conducted 
(U) 

(27) The Attorney General and the Secretary of Homeland Security will conduct a review of the 
organization, structure and progress of the Terrorist Screening Center at an appropriate time, and 
repon to the President through the Assistant to the President for Homeland Security. The report 
will include a recommendation on whether any modifications to the Terrorist Screening Center 
should be made. (U) 

(28) To the extent permitted by law, the Director of the TTIC will promptly assume 
responsibility for the functions and personnel of the Department of State's TTPOFF 
countenerrbrist program, less those components devoted to providing operational support to 
TIPOFF users and will ensure that all terrorist identity information contained within the TIPOFF 
database is fully integrated into the TTIC database. The functionality of the TIPOFF program, 
whereby consular officials receive near real-time feedback to hits to TIPOFF entries, will be 
maintained or improved upon. A «;enara«<* Aopev m this Memorandum will be promt>tlv apreeH 
to regarding the modalities of TIPOFF relocation to the ITIC, ana ine specittc responsibilities of 
each rany. (U) 

(29) Beginning with the standup of the Terrorist Screening Center. Federal departments and 
agencies will discontinue or transfer to the Terrorist Screening Center, to the extent permitted by 
law and with appropriate consultation with the Congress, those operations that are duplicative of 
the Terrorist Screening Center's mission to provide continuous operational support to users of 
the terrorist screening database, including but not limited to: 

(a) those components of the Department of State's TIPOFF countcrterrorist program devoted to 
providing operational support to TIPOFF users (with the exception of a small element that will 
remain at the Department of State to facilitate intelligence support to the Bureau of Consular 
Affairs); 

(b) the FBI's Watchlist Unit; and 

(c) the Transportation Security Agency's No-Fly and Selectee list program. (U) 

(30) Consistent with HSPD-6 and other presidential directives, this Memorandum does not alter 
existing authorities or responsibilities of the heads of Federal departments and agencies to carry 
out operational activities or provide or receive information. (U) 

(31) To the extent that existing notices are not sufficient, the Parties to this Memorandum, which 
will provide information to the TTIC, the FBI, and/or the Terrorist Screening Center under 
HSPD-6 and this Memorandum, will publish in the Federal Register, prior to the standup of the 
Terrorist Screening Center, "routine use" notices under the Privacy Act sufficient to indicate that 
such information will be provided. (U) 
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(32) Th.s Memorandum of Understanding i. effective from the date of s.gnature by all Panies 
Anv Pany may snomn, through the Assistant to the President for Homeland Securitv vvrm^' 

bv ail P.r-i.^. Th. oj- T „ =f^^"ges snail become efrecnve upon the date of approvH 
elciilrrc, fU ■ "°' on= year fto. fts' 





natures are consolidated from classified version of the original TSC MOU. 
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THE SECHETARV OF STATE 
TBE SECRETARY OF THE TEEASURY 
THE SECRETARY OF DEFENSE 
THE ATTORNEY GENERAL 
THE SECRETARY OPHOMEUND SECURITY 
TB£ DIRECTOR CMP NATIONAL INTEUIGENOE 
THE DIRECTOR OF THE CENTRAL INTOXIGENCE AGENC Y 
THE DIRECTOR OF THE NATIONAL COUNTERTERRORISM CENTER 
THE DIRECTOR OF THE TERRORIST SCREENING CENTEA 

ADDENDUM B 

TOTHE 

MEMORANDUM OF UNDEJbSTANDmG ON THB INTEGRATION Al® 
SOIEBNINQ INOiORMATIQN TO EROTECT AGAINST TERRORISM 

BMktreaid 

(1) This Addeadom. CAiUendom B*) mppteme&u ibe Memorudum of UndenookliBg oo the 
Ii^eptdcui aiMi Use of Screeaiag lafOFOialioo to l^toa Agi^ 

20(B, C^TSCMOU*') and n)pen:«dcs& Addendum A. effi^ Todaeexteot 
dm Add£iuiimi B U iiMMOsUteiU with dte TSC MOU, Addea^ 

In additioB. Addfftdma B tapepoedet the TIPQI7-TERRORMM»wrM>dBmof Ifcdecsteixilng, 
dated laoe 4, 2002. between tbe Departmeat of Stata, d>e Defease htfinigioce Ayawy, &e 
NatjoaaJ Seoirity Aceacy. dbe Fedend Bnrean of ]sm 
AjjCiocy Of any otha- interim ayeeinfentiatauledt^ 
lafomiJiaa. 

(2) AddeadnmBiaooipocKesfayfefeteiicoanprovisiocuoftbeMenMnB^^ 
betiwn. the lotelHgepceOop u i mi y. Federal ijwEnfqroeT^^ 

of Hoaelaod Sectu^ Coocenuni iofonxiatton Shariag. dated March 4. 2003 Ctbe btfotmatioD 
Shariog MOU") and the TSC MOU. By their tignatcres on Addendum A. the Seeretary of State^ 
the Seeretaiy of li^ Tkeasmy, and the Secretary of Defense becszoe signatories of die 
Isfonaaxicm ShadogMOU aad tfaeTSCMOU and agree that all provisions of those MOUs apply 
to all entitiea dm are, or become, wholly or bi ptxt, pan of, xespeeiively, tbe Depaitne&t of State, 
the Di^uutineot of die Tteasury saA the Depaittnent of Defense. To the extent that tbe TSC 
MOU ajDd Addeodum B provide for greater iafonaadoa sharing than thai t n an d ated by the 
Infonoatioit Shaikg MOU, the provisioas of TSC MOU aad Addeadom B shall oootrol the 
Parties' acttoat. In aH o&er respects, to the extent that provistoos of the TSC MOU and/br 
Addettdmn B ait incoosisteat with the Infonoatioo Sharing MOU. the piovisioiis of the 
lofotraation Sharing MOU shill control the actions of the Parties to (his Addendum. 

Purpose 

(3) The purposes of Adde&dura B arei 

(a) ioeivsn]retfaefuUinf>leii}efltt&oi)ofsttbpangi«^ 

Directive-<S (]£SPD^» dated Sqplcmber 16. 2003. entitled 'Integration and Use of Screcidsg 
Infonsstios to Protect Agaitkst Tororism:" and 



t 



(b) to Qysmorialize the Pirdec* agreement thuiik^ will, to the m&Jumum ejcccnt penriaad by 
law aad consiitiwt wiih the PFe3i(ieat*s direcdon for the estabtishment of the TeiroriM Threat 
liatesTUioa Ceater, now the Nation)] Couotettarromtt Ctixttr (KCTC) md the Lafonnation 
Sbarioc l^OU. prcnriik to the N(nt: on an <mgoiag basis aU 

dte lBS&iiiget\ot Refonn and Temmsm Preveatioc Act (IRTPA) of 2004, Section I Ot 6(a)(4)) in 
their posse&sioa, custody, or cooctol 

Procedures 

(4) TbePaitie$will.u>theinax!naimextmFcniutt6dbyUwai^co(u^ 

eatabGxhmeiit of the VICTC, the Infonnattoa Sbaring MOU, and in fuirherance of the informAtion 
sbahne naiKktes in IRIVA, provide to tltf NCIX^ OQ an ooeoi^ 

Moniutioii. in d]cir possession, custody, or control, U ad«&tiopal procedures and Tnccfaatiinm 
are needed beyood those daitOed in the InfonQatioo Sbadng MOU and IRTPA to aocon^lish 
thiaLQdti£nj.botfiacliiBitedto.compaitmeaCedprotFantt,tbe)^^ inooonSnstioDwiththe 
p22tiec di-ttfapinating die Tcnonsm ksfoBmuUioo COriginaton'), shall estabbih procedoies to 
guide tbe proviiion of such infonnadao. and die Paities shaU establish procedures and 
mechanisffis to provide socb informatioQ. 

(5) A wd>4>ased veaiop of the NCTC Ideatitiec Database, the Tenodst He p titiet Datatxatt 
Eavinmioeat mDE-Ootine). ts mandated in ±t TSC MOU. viU be available to aU iodividuals 
who have obtained aoICcertiAcatc for Kccu u>KCrcOnlix>eCNQL),focxDerly known 
CIIiKK:,vhicbisaC(min«mQrofiEntefeatOAlNTEIi>^ The NCTC will malce available to 
the Parties upcxi rcqncci, the names and clearances of pmoood liTtb access to TIDE-Odine. AH 
uscn will be netpoasible for complytng with the coaditiooa aet for aaoeta to TlDBOnline. 

(6) Whefa the Pmie* provide rtiiyffl'inated Tenociatn InfonBadOB to tbe »CTCX ao spcetRe 
]M>tificadoa «aU occor between the NCTC aid die Odfinauir ideo^^ 

Infornvrtinti contained ia those con>oi»iBiftat>ont were placed in TIDE. 

(7) The Parties aatiboriw&eNCrc (and tbe rai for Purely I3ora««icTenoc^ 

defined in tbt TSC MOU) to provide to die TSC die following daa (tefened to as. Terrorist 
Ideatifierc*)« in accocdanoe with tbe provisions of paragraj^ CK) below, far indusioo in the 
TSCs cooosolidated teaorist saeenine dat^e (TSDB): 

(a) Names and aliases; 

(b) Dates of birth; 
Iq) Places ofbirth: 

(d) Uaiqtie identifying BnflA>ers sticfa as alien registration nucbbers, visa ntunbers. soda] secohty 
•ccoQct numbers: 

(e) PaAsport infonnatiott, isdading passport numbers, coontrias of issoance. dates and locadons 
of issuance, eji^uration dates, passport photos, and other televaxit data; 

(f) Countries of nrigin and natioailitier. 



(g) Physical id<»tificrs, such »s sex, race, hdghi, vrdf^ eye color, bair coloi; scars, narks, or 
uttoos; 

(h) Kfiown locatiioDs, Le. uddresses; 

(i> Photoffraphfi or renderings of the individual; 

(i) Fiiig«zpiint5 or oihff biomettic data; 
(k) EmpIoyiQcaii data: 

(1) Licesse plate numben; 

(m) Asy o&er TenoiUm InfbraDatxon tbat Ong^iaton cpediiciay provide fyr passage to the 
TSC. 

(8) Once provided to the NCTC (or At FBI fbr Parely Domestic Terrorism Information), the 
Parties agree that tiic NCTC (or the FBI for Purely Domestic Tercoiijm Infonnaoon) wiU deem 
the Terrorist IdoaiSm lirted in. pamgraph (7) For OfiSdal Use Only (FOUO) Car the purpoBes of 
providing the data to the TSC lor Inclofiioii in TSDB. Tljese Terrorist Idearifiers passed to the 
TSC vndietaixiedin TSDB viU be deemed FOUO. 

(9) The OrigLaator may prohibit the KCTC from passing the Tegoritt Ida3lifiei(a) Ideotifind in 
(a) (m) above to the TSC as FOUO data for indusion in TSDB if an appropriate official so 
as&oiizes. EaohOrifbalor shall identify its Terctnstldentifiei<s) that uet^ 

bciiig passed to the TSC fiw inclosian in TSDB by marking tibosc itaas, TTDE restricted." 
RestrictioQs on luc shall be imposed only to the exteol strictly necessary to prevent the 
unauthorized disclosure of infannation that cloeily identifies, o( would reasonably petmtt ready 
idectiiloation oC, inteOi^enoe or sensitive law tofbrcemcot sources, methods, acdvitics or 
czyptology that are paiticulaily susceptible to countermeasuzes that would nullify or measurably 
reduce their effectiveDess. 

(10) The Patties agree thai subject to an Originator's ability to prohibit speeifLc Tmonst 
Identifiers from being included in TSDB, all Tcnorist Ideatificzs listed in (7) nay be passed to 
the TSC, regardless of the date or classification of ^ disseminated Ten-orism lofbimaCioiL 

0 1) Nothing in Addeodura B shall inhibit or delay the proxnslon of Tarorism In&rmstion to the 
NCTC. 

(12) Abseos prior approval by the OriginBtor, iufntmatiop (inclodiog all information de3igp2|ted 
classified or FOUO in TIDE and information in TSDB) may not be used in aoy legal or 
adnmistralivc proceeding or procesj, including any judicial or quasi-Judicial process, 
pretenlaxloo to grand Or petit Juries, subaissSoa as part of an abdication for subpoetus, orders 
for electronic surveillance, search or arrest warrants, presentation as evidence, or any use that 
oonld result in public disclosure. Infonn&tioo from PISA eoUection, or derived thtt«£rom may 
only b&usedinie£;al or admirustratlve proceeding or frocsess with the advance axnhorizatioo of 
the Attorney GeneraL Any recipient of information from TSDB Interested in obtaining 
authorization to use thai infhrmation in a legal or administrstive procecdii^ or process must 
cOTtact the TSC to obtain the approval of the Originator. If TSDB iofonnation U fnaa FIS A 
coUcctioii, or derived iherefrwn, tlic TSC dhrough VSl Headquartm, will ftbUin the nccessaiy 



AltotMy Genera] autborizatioo. Any reproduotion, diisamirarioa, or oonanuoiorioc (oduding. 
but not limited t<5. oral briefings) of tny inlbnnation from TSDB must be tcoaaspaaicd by & 
Ktaremeot of these restrictions. Noihiog in ihij pmgraph shall inhibit tLc sharix^ of £ limited set 
of Tamrin Identifiers: mane; date of biitii; pasqxm luimber; passport eouotty of 
originycitizeQship, widi state, local aad tribal audidrities. or foreigQ govemmeots for teciorisza 
M«*ning potposes. as pennined by law, regulation, or agreemeot of the Parties. 

(13) Whe& tea individual in TSDB has been positively identified duxtog a screening encounter, 
die Parties will provide the NCTC with Tcmnitm lafonttatiOB ^ '/vM ofifd during the cnamotei, 
such B3 photographs, fingeipriais, copies of pocket liner, cqpiei of written data, «oy reports of 
Terrorism Inforaunjon provided by that individual, or other items of potential interest, for 
inclusion in TIDE. The NCTC and/or fl)cTSC will, in partnership with d^trtments and 
ageodfts which are not Patties to AddeBdnm B, hut whicjj condua scrteoing using TSDB, 
establish pttscedures to ensuie that, wiien an individual in TSDB has been positively identified 
during a screening cono<mte f . those departments and apades will providg flia VCTr »t\A all 
appropiiaie agencies that have a counterterrcrism m^trion, wiftt Teftwian fcfbimalion as 
described above. 

(14) The Director of the TSC shill esttblisfa procodttral safcguaids, incJudinfi. btit not limited to, 
training, st&iulani opertting procedures. xjkI caller autbeoticatiQa procedures, and c>ui»l 
in5>len>eat technological safeguards, lactadina but not liauted to, &e use of firewall* aad puHic 
key cooypiiop, to xoiaimize the imamhnrigfid diaelflsurc at infnrmtHi^ ^p^j ^ rp <h ip g the 
vulnerability of TSDB to unaothoriaed access or cxploitatioiL The establishment of these 
safeguards shall in no way inhibit or delay the provision of information to the NCTC or die TSC. 

(15) AddcodnmB amends Director of Central Intelligence IMrective 2/4 (DC^ 

replacing Ae term "^otist threat-delated jnfomwtfon." wherever it tpptxn in DCff) with 
the terra Tenarism faifimnatioai. as defined in the IRTPA. * 

Implementation 

(16) Addendum Bis effective from the dale of rignatarc by all Patties and applies to all 
disseminated Terrarinn Monnatjon. regazdleos of die date of the docuaxsni in ^ch it is 
contained Addcoduin B may be signed in oounteiparta. 

(17) The NCTC, the TSC, and the Fanies. in ooordinaticm wifli appropriate Originator, shall 
rcpon to the Homeland Seciirity Advijor from tirne to time as appnMrt^ 

in m^lemeni Addendum B. 

(«) Nodmg in AddealiimBttlt<«, or impedes the ibOity or tudjori^ 
and agencies to pa&aa. ihcir responsibilities undcj law, eoosisteat witJi appUoable legal 
awhontics end Ptcddeirtial guidance. SpedCcaUy, nodiing in Addendum B alters the 
RT^°° *^^»™eTe<iuircmenu of the Homeland Security Act orihc requiiements of the 
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Dale 



Secretary of the Treasury Dale 



Secretary of Defense Dale 



Attorney Genera] Date 



Seoetaryof Homeland Security Dale 



Director of National Intelligence Date 
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Secs^sky at State 



DwtB 




Date 



Attotney Geiiiea! 
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Dale 
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Date 
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Da£B 
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Date 



I 



..APR. 28. 2006 4:55PM>-, 
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Date 



Secretary of tbe TuBBsaiy 



Date 
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AOuney General 



Date 



Secretary of Rbrndand Security 



Date 




Dnectop^f^alunaylM 



Date 



Date 



D«te 
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Secretary of State 



Date 



Secretary of tbc Treasury 



Date 



Secretaiy of Defense 



Dale 



Attorney General 
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Secntary of Homeland Security 
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D«tB 



Date 



Diiector. CeDtral Intelligence Agency 



Date 
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Secretary of Qje Treasury 



Date 



Secretary of De&DM 
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Due 



Dub 



Dbvctar. Genal bAaffisoDfla Aesacy 




Dtta 
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DatB 
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G?ICEJiLSSiriiD//FO?. OFFICIAI. USE ONLY 

THE DIRECrOS OF CENTRAL INTn.LIGENCE 
Washington. DC joios 



DAC-51355-03 
* March 2005 



MEMORANDOM FOR: National Foreign lotelliffsace 
Prograra Principals 



SUBJECT: 



(D//FOUO) Hoiaelajid Security Information 
Sharing Memorandum pf understanding 



, {C//FOUO) The Ac rorney General, Secretary of 
Homeland Security, and I have just signed the attached 
Menorandun of Understanding on Infonnation Sharing (MOU) 
rngplemencing infonoation sharing requirer^.cs o* the 
Eoaieland Security Act (Act) . Ic is effective ajnr.ediately. 
As yovi JoQCW, Che Department of Koaseland Sftcurir.y 
(Department) has now reached critical mass. Our 
corresponding intelligence support function has also 
B«atured. 

2 . (U//f OUO) AS with much recenc hcsneland securicy- 
relaced work, the drafting process on this high priority 
White Kpiise initiative aioved quickly. successive drafts 
were sent to each of your agencies, with all coraments 
.Lorwarded directly to Che White House drafting tean- The 
resulting «400 is a fair expression of whac the Act requires. 

expect each ot you to hold chose you s-jpervise accountable 
tor givxng full effect to each of the MOU's provisions 
Note chat the MOD makes Associate Director of Central 
Intelligence for Homeland Security. Winston P. Wiley my 
representative for information sharing \inder the MOO He 
has my proxy and full support. 

i^^^^9^^ *n<i efficient ii^plementation of the 

MOO Will henefit not only the Department, hiit also 
vncelligence and law enforcement agencies. As wici the 
Terrorist Threat Integration Center, we will e-Tibrace the 
opportunities and challenges it presents. 



I ceokgi J. Tenet 



cc: ADCI/as. Winston p. Wiley 



Ac cachmenc ; 

^tr on Xnfonsation Sharing 



CJKCrASSIFrED//FOR OrFICLitL "JSS OiJI,Y 



MEMORANDUM OF UNDERSTANDTNG BETWEEN THE fNTELLIGENCE 
COMMUNITY. FEDERAL LA W ENFORCEMENT AGENCIES. AND THE DEPARTMENT 
OF HOMELAND SECtmiTY CONCERNING INFORMATION SHARING 



This Agreement provides a framework and guidance lo govern inforraalion sharing, use. 
and handling between; the Secretary of Homeland Securily, on behalf of the Department of 
Homeland Securily (DHS). including all entities that arc or become, wholly or in part, elements 
of DHS; the Director of Centra) Intelligence (DCI), on behalf of all entities that are, or become, 
wholly or in part, clemcnis of the United Slates Intelligence Community (IC), other than those 
that are to become part of DHS; and Ihc Attorney General, on behalf of the Department of Justice 
(DOJ). including the Federal Bureau of Investigation, and all entities that are, or become, wholly 
or in part, elements of DOJ, and any other department, agency, or entity having federal law 
enforcement responsibilities, other than those that are to become part of DHS. 

I • Scope of Application . This Agreement shall be binding on all such departments, 
agencies, and entities on whose behalf ihe Secretary of Homeland Security, the DCI, and the 
Anomey General agree herein. This Agreement is intended to mandate minimum requirements 
and procedures for information sharing, use. and handling, and for coordination and deconfliction 
of anal\lic judgment-s. Departments and agencies are encouraged lo develop additional 
procedures and mechanisms to provide for greater infomiation sharing and coordination than 
required herein, consistent with the DHS Legislation and odier relevant statutory authorities. 
Presidential Directives, the President's announced policies for protecting against terronsi threats 
to the homeland, and this Agreement, incltiding, but not limited lo: 

(a) the Homeland Security Acl of 2002; 

(b) the National Security Act of 1 947, as amended; 

(c) the Uniting and Strengthening America by Providing Appropriate Tools Required 
to Intercept and Obstruct Terrorism Act of 2001 ; 

(d) the Foreign Intelligence Surveillance Act, as amended; 

(c) Executive Order 1 2333, as amended, and any subsequent Executive Orders on 
Intelligence Activities; 

(f) Executive Order 1 323 1 . as amended, and any subsequent Executive Orders on 
Homeland Security; 

(g) Guidelines Regarding Disclosure to the Director of Central Intelligence and 
Homeland Security Oflicials of Foreign Intelligence Acquired in the Course of a 
Criminal Investigation, dated September 23, 2002; and 

(h) Guidelines for Disclosure of Grand Jury and Elecu-onic. Wire, and Oral 
Interception Information Identifying United States Persons, dated September 23, 
2002. 

To the extent that this Agreement provides for more expansive information sharing than 
other authorities or agrecmenLs, with the exception of statutes, or Presidential Directives 
including, but not limited to. Executive Orders. ("Presidential Directives"), the more expansive 
provisions of this Agreement shall be followed 



2. 



Definitions . For purposes of this Agreeinenl: 



(a) "Analytic conciusion" tne^ns the product of anqjysi.s of one or more pieces 
of information in which inferences are drawn from the information being analyzed to 
arrive at a determination about a fact - such as, for example, a potential threat ^ that is 
not explicit or apparent from the face of the original information itself It does not 
include, for example, a summary of the factual content of a piece of intelligoice 
information, a report of an interview, or a report or other document that merely collects 
and summarizes information from multiple sources about the same or related topics, or 
other types of communication which do not include analytic conclusions as described 
above. 

(b) "Attorney General" means the Attorney Genera] of the United States or the 
Attomfl:y General's designee, except as otherwise provided herein. 

(c> "Classified information" means information that has been determined pursuant 
to Executive Order No. 1 2958, or any successor order, Executive Order Nq. 
1295 1 , or any successor order, or the Atomic Energy Act of 1954 (42 U.S.C. 
201 1), to require protection against unauthorized disclosure. 

(d) "Covered entity" means: any d<^artmcnt, agency, bureau, office^or other 
entity thai is, or becomes, wholly or in part, an element of the Department of Homeland 
Security (including the Department itself); any department, agency, bureau, office or 
other entity that is, or becomes, wholly or in part, an element of the United States 
Intelligence Community or the Department of Justice; and any other deparmient, agency, 
or entity having federal law enforcement rcsponsibilitiesT 

(c) "Covered information" means terrorism information, weapons of mass 
destruction (WMD) information, vulnerabilities infomiation. and other information 
relevant to the duties of the Department of Homeland Security, as well as analyses based 
wholly or in part on such covered information. 

(f) "Department" or "DHS" shall mean the Department of Homeland Security 
and any entity that is, or becomes, an element of that Department. 

(g) "DHS Legislation" means the Homoland Security Act of 2(X)2 (H.R. 5005, 
I07th Congress. 2d Session) (November 26. 2002), as it may be amended from' time to 
time. 

(h) "DCr means the Director of Central Intelligence, or, except as (ptherwise 
provided herein, the DCI's designee, in his or her capacity as bead of the Intelligence 
Community, and as head of the Central Intelligence Agency. , 

(i) "Foreign intelligence" has the meaning given to that term in section 3 of 
the National Security Act of 1 947, as amended (50 U.S.C. 401a), as that statutory term 
may be amended from time to time. 



(j) "Homeland" means the United States as defined in the DHS Legislation. 

(k) "Infrastructure" means the basic systems, assets, facilities, services, and 
installations needed for the functioning of our society. The term includes, but is not 
limited to, critical infrastructure, meaning systems and assets, whether physical or virtual, 
so vital to the United States that the incapacity or destruction of such systems and assets 
would have a debilitating impact on United States national security, economic security, 
national public health or safety, or any combination of these. Critical infrastructure 
includes, but is not limited to. agriculture, food, water, public health, emergency services, 
government, defense industrial base, information and telecommunications, energy, 
transportation, banking and finance, chemical industry and hazardous materials, postal 
and shipping, and national monuments and icons. 

(1) "Infrastructure information" means all information related to the 
identification, status, security, criticality, risk assessment, vulnerability to all means of 
attack, interdependency. and attack consequences (including potential impact on public 
health or safety, the economy, national security, governance and public confidence) of the 
infrastructure of the United Stales. 

(m) "Intelligence Community" has the meaning given it in section 3(4) of the 
National Security Act of 1947 (50 U.S.C. 401a(4)), as it may be amended from time to 
time. 

(n) "Need-to-know" means a determination made by an authorized holder of 
classified information, or sensitive law enforcement information, that a prospective 
recipient requires access to a specific piece, or category of information in order to 
perform or assist in a lawful and authorized governmental function. 

(o) "Parties" means the signatories to this Agreement and their successors, on 
behalf of all covered entities they head, supervise or represent. 

(p) "PATRIOT Act" means the Uniting and Strengthening America by 
Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA 
PATRIOT) Act of 2001, Pub L. 107-56, 115 Stat 272, 278-81. 

(q) "Secretary" means the Secretary of Homeland Security or the Secretary's 
designee, except as otherwise provided herein. 

(r) "Terrorism information" means all information relating to the existence, 
organization, capabilities, plans, intentions, vulnerabilities, means of finance or material 
support, or activities of foreign or international terrorist groups or individuals, domestic 
groups or individuals involved in terrorism, to threats posed by such groups or individuals 
to the United States, United States persons, or United States interests, or to those of other 
nations, or to communications between such groups or individuals, and to 
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tnfonnation relating to groups or individuals reasonably believed to be assisting or 
associated with then). 

(s) "Vulnerabilities information" means all information relating to the 
susceptibility - actual, perceived, or conceptual - of the United Slates, including any 
portion, sector,, population, geographic area, or industry, to terrorist attack. 

(t) "Weapons of Mass Destruction information" or " WMD information" 
means terrorism information or vulnerabilities infomiation relating to conventional 
explosive weapons and non-conventional weapons capable of causing mass casualties and 
damage, including chemical or biological agents, radioactive or nuclear materials, and the 
means to deliver them. 

3. Policies and Procedures for Information Sharing. Handlinp and Use . Consistent 
with the DHS Legislation, and except as otherwise specifically provided in this Agreement, the 
following agreed-upon policies and procedures shall apply to the provision of covered 
information by any covered entity to any other covered entity, to the interpretation of all 
provisions of this Agreement, and to the resolution of all issues related to informatioo sharing, 
handling and use, and the coordination and deconfliction of operations and analytic conclusions: 

(a) Priority on Preemption, Prevention, and Disruption. All procedures, 
guidelines, and mechanisms under tliis Agreement shall be designed and impleinented, 
and all determinations with regard to sharing information covered by this Agreement shall 
be made, with the understood, overriding priority of preventing, preempting, and 
disrupting terrorist threats to our homeland. The panics recognize and agree that, in some 
cases, this priority shall dictate information sharing even where doing so may affect 
criminal prosecutions or ongoing law enforcement or intelligence operations. 
Nonetheless, the covered entities shall act under this Agreement in a marmer to protect, to 
the greatest extent possible, these other significant interests, including the protection of 
intelligence and sensitive law enforcement sources and methods, other classified 
information, and sensitive operational and prosecutorial information. 

(b) Reciprocity and Transparency. All information collected by any covered 
entity relevant to the missions and responsibilities of any other covered entities should be 
shared, to (he greatest extent possible, between and among all covered entities. Likewise, 
the parties agree that, to the greatest extent possible, there should be transparency 
between and among the covered entities with regard to their activities to preempt, 
prevent, and disrupt terrorist attacks against U.S. persons and interests. Except as 
otherwise specified in this Agreement, or mandated by relevant Federal statutes or 
Presidential Directives, procedures and mechanisms for information sharing, use, and 
handling shall be interpreted and implemented consistently and reciprocally regardless of 
the role a particular covered entity plays as a provider or recipient of covered information. 
In other words, for example, international terrorism infomiation collected by the Border 
Patrol should be shared by DHS with the IC to the same extenl foreign intelligence 
information on terrorism is shared by the IC with DHS. 



(c) Scope o f Covered Informadon." Consistent with the priority established 
in Section 3(a), information relating to terrorism. Weapons of Mass Destruction, 
vulnerabilities, or other functions of the Department of Homeland Security shall be 
presumed to be "covered information" under this Agreement. If, after applying this 
presumption, disagreement remains between covered entities about whether particular 
information is "covered information," such disagreement shall be resolved pursuant to 
Section 4(d). 

(d) Effective date of information sharing obligations. Notwithstanding 
provisions of diis Agreement mandating further agreement on mechanisms, procedures, 
or other issues, the parties recognize that the obligation to promptly begin the full range 
of information sharing mandated by the DHS Legislation came into force on January 24, 
2003, and that obligations under this Agreement will be in force upon the signamre of all 
parties. 

(e) Sharing Requirements Based on Substance Only. Consistent with the 
DHS Legislation and other relevant statutory authorities. Presidential Directives, the 
President's announced policies for protecting against terrorist threats to the homeland, 
and this Agreement, the parties agree that this Agreement requires that covered 
information, including, but not limited to, terrorism information, WMD infomiation, 
infirastructure, and vulnerabilities information, be jprovided by any covered entity that 
collects or analyzes that infonmation to any other covered entity that has a necd-to-know 
that information (or information relating to that subject matter), based on a broad 
interpretation of the mission of the other covered entity, regardless of; 

(i) The type of communication in which the information is incorporated . 
Covered information must be provided as required in this Agreement regardless of 
the type of communication in which it is originally reported by the providing 
agency. The fact that particular covered information may be contained onginaily 
in a particular type of communication shall not, under any circumstances, be 
grounds either to withhold or delay the sharing of any covered information. As 
illustrative examples only, covered information must be provided by CIA, within 
the time frames agreed to. whether such information is contained originally in 
communications refcnred to as "TDs." "intel cables." "ops cables." or any other 
type of CMmmunication. Likewise, covered information must be provided by the 
FBI, within the time frames agreed to, whether such information is contained 
originally in communications referred to as "302s," "ECs," "LHMs." or any other 
type of communication; 

(n) The manner in which the information is or may be conveyed to the 
intended acencv or i ndividual recipients . Covered entities shall continually 
endeavor to improve technological means of access to afford maximum 
flexibility, speed, and volume of information shared, consistent widi the strictly 
necessary protection of intelligence or sensitive law enforcement sources and 
methods, and with section 3(a) and other relevant provisions of this Agreement. 
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(0 Terrorist Threm Integration Center. The parlies agree that, when fully 
operational, the Terrorist Threat Integration Center (TTIC) shall be the preferred, though 
not the exclusive, method for sharing covered. information at the national level: TTIC 
information-sharing mechanisms and procedures shall be consistent with the DHS 
Legislation and other relevant statutory authorities, Presidential Directives, the 
President's announced policies for protecting against terrorist threats to the homeland, 
and this Agreement. As soon as practicable, the parties shall determine the extent to 
which provision of information to one or more covered entities via the TTIC may 
constitute the only required method for providing such infoimation to such entities, 
provided however, that any.decision to share covered infonnation among the parties 
solely by means of the TTIC shall be memorialized in a separate written agreement 
executed by the parties, including by designees of the officials signing this Agreement. 
Analytic conclusions contained in TTIC products shall not be altered by agencies prior to 
dissemination. 

(g) Policies for Sharing Particular Types of Information With DHS. 
Consistent with the DHS Lcgislalion and other relevant statutory authorities, Presidential 
Directives, the President's announced policies for protecting against tcnrorist threats to 
the liomeland, and this Agreement, the Secretary shall be provided access to all 
information necessary for him to cany out the mission of the Department. Except as 
otherwise directed by the President, the parties agree that the amount of infonnation and 
depth of detail of infonnation provided to the Secretary, which will vary by the type of 
information at issue, will be governed by the following policies: 

(') Information Related to Threats of Terrorism Against the United 
States. As required by the DHS Legislation, DHS shall be provided, without 
request, all "reports (including information reports containing intelligence which 
has not been fully evaluated), assessments, and analytical information." The 
parties understand that, in this category, except upon further request by DHS, and 
agreement by the originating entity, provided information will not routinely 
include information, collected through intelligence sources or methods, or 
sensitive law enforcement sources or methods, which has not been processed in 
any way to reduce the amount of substantive content or synthesize the material. 
TTius, for example, a recording of a conversation intercepted under the Foreign 
Intelligence Surveillance Act (FISA) or an intelligence officer's or FBI agent's 
hand-written notes of a discussion with a source would not be routinely provided 
in diis category. By contrast, a report forwarding the substance of a FISA- 
recorded conversation, or an FBI "Electronic Communication" (EC), including the 
substance of a discussion with a source, even if these include verbatim quotes 
from the underlying notes, would be provided. ECs containing substantive 
infonnation, along with "302s," "TDs," "IIRs," and all other similar documents 
including substantive infonnation, fall into the category of information to be 
provided. The parties agree, as soon as practicable, lo identify and/or put into 
place necessary and reasonable mechanisms, including, when operational, the 
TTIC, along with the Joint Terrorism Task Forces (JTTFs), and procedures, to 
ensure thai DHS receives all such information automatically, under the policies 



and procedures agreed to in this Agreement, without further request. 

(") Vulnerabiliti es Information . As required by the DHS Legislation, 
J DHS shall be provided, without request, all information of any kind concerning 
"the vulnerability of the infrastructure of the United States, or other vulnerabilities 
of the United States, to terrorism, whether or not such information has been 
analyzed." The parties understand that, in this category, without fiitther request 
by DHS, provided information will routinely include information, collected 
through intelligence sources or methods, or sensitive law enforcement sources or 
methods, which has not been processed in any way to reduce the amount of 
substantive content or synthesize the material. Provided information will include 
all types of information, without regard to the distinctions drawn by way of. . 
example in Section 3(gXi), except as further agreed to by the parties or their 
designees. The parties agree, as soon a.s practicable, to identify and/or put into 
place necessary and reasonable mechanisms, including, when operational, the 
TTIC, along with the JTTFs, and procedures, to ensure that DHS receives all such 
information, under the principles agreed to in this Agreement, without fiirther 
request. 

(>»>) Information Relating to Significant and Credible Threats of 
Terrorism. As required by the DHS Legislation, DHS shall be provided, without 
request, all information of any kind concerning "significant and credible Ihteais of 
terrorism against the United States, whether or not such information has been 
analyzed." The parties understand that, in this category, without further request 
by DHS, provided information will routinely include information, collected 
through intelligence sources or methods, or sensitive law enforcement sources or 
methods, which has not been processed in any way to reduce the amount of 
substantive content or synthesize the material. Provided information will include 
all types of information, without regard to the distinctions drawn by way of 
example in Section 3(g){i), except as further agreed to by the parties or their 
designees. The parties agree, as soon as practicable, to identify and/or put into 
place necessary and reasonable mechanisms, including, when operational, the 
1TIC, along with the JTTFs, and procedures, to ensure that DHS receives alt such 
information, under the principles agreed to in this Agreement, without further 
request. 

(iv) Other Information Requested hv the Secretary . The Secretary shall 
be provided, upon request, with such other information relating to threats of 
terrorism against the United States or to other areas of DHS' responsibility, 
whether or not such infomiation has been analyzed. The parties understand that 
DHS will be provided information in this category upon request including, if so 
requested, information which has not been processed in any way to reduce the 
amount of substantive content or synthesize the material. If so requested, 
provided infonnalion will include all types of information, without regard to the 
distinctions drawn by way of example in Section 3(g)(i), except as otherwise 
directed by the President. The parties agree, as soon as practicable, to set up 
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necessary and reasonable mechanisms, including, when operational, thfeTTIC, 
along with the JTTFs, and procedures, to ensure that DHS, when requeSsted, 
receives all such information, under the principles agreed lo in this Agreement. . 

(h) Timely Sharing of Information. Covered information must be provided to 
those with a need-to-know that information (or information relating to that subject 
matter), based on a broad interpretation of the mission of the other covered entity, as 
quickly as possible. Providing all timely and relevant covered information to those who 
have a need-to-know it in order to assist them in meeting their homeland security-related 
responsibilities is fundamental to the success of the Department and all other efforts to 
ensure the security of the homeland from terrorist attack. Delay in providing such 
information risks frustrating efforts to meet these critical responsibilities and could result 
in preventable attacks against U.S. persons or interests failing to be preempted, prevented, 
or disrupted. .Accordingly, except as otherwise directed by the President or agreed to by 
all parties, the parties agree that: 

(i) Information that a covered entity reasonably believes relates to a 
potential terrorism or WMD threat, to the United States homeland, its 
infrastructure, or to United States persons or interests, shall be provided 
immediately to other covered entities; 

(ii) Other covered information, including, but not limited to, 
vulnerabilities information, but which a covered entity does not reasonably 
believe relates to a potential terrorism or WMD threat to the United States 
homeland, its infrastructure, or to United States persons or interests, shall be 
provided as expeditiously as possible; 

(iiO Under no circumstances may covered information be withheld 
from a covered entity with a need-to-know that information (or information 
relating to thai subject matter), based on a broad interpretation of the mission of 
the other covered entity, or may the sharing of such infqrmation be delayed 
beyond the time frames agreed to in this Agreement, except as consistent with the 
Section 4<d), or other relevant provisions of this Agreement; 

(iv) When a question arises as to whether covered information must be 
provided to the Department or any other covered entity pursuant to thisj 
Agreement, the parties will resolve the question pursuant to Section 4(d); 

(v) Covered entities agree to use, to the greatest extent possible, the 
most rapid methods ofinfonnation sharing, consistent with the strictly necessary 
protection of intelligence or sensitive law enforcement sources and methods, and 
with Section 3(a) and other relevant provisions of this Agreement; and 

(vi) Consistent with Section 3, and other relevant provisions of this 
Agreement, the parties agree that they shall work diligently to ensure that all 
covered entities receive the sume information within the same time frame. 
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Agreement, to withhold in its entirety a conmunication containing covered 
information, such indication shall occur immediately. 

(v) The parties agree that the provisions of this section shall not apply 
to established source protection procedures utilized by CIA's Directorate of 
Operations, or equivalent procedures developed and used by other covered 
entities, provided lhat such procedures do not result in the failure to provide DHS 
with substantive information as required under the DHS Legislation and this 
Agreement, and that the Secretary may personally request revisions in such 
procedures if he detennines that they restrict DHS' access to information in a way 
that jeopardizes DHS' mission. For information described in Section 3(i)(i), such 
procedures shall be revised, as soon as is practicable, and without request from the 
Secretary, to ensure that those procedures' only remove such intelligence tltat 
clearly identifies, or would rea.sonably permit ready identification of, intelligence 
or sensitive law enforcement sources or methods that are particularly susceptible 
to countermeasures that would nullify or measurably reduce their effectiveness. 

(j) Requests for Additional Information. In addition to the participation of 
DHS in the "requirements" processes, as discussed farther herein, the DHS Legislation 
provides for DHS to request additional or follow-up information upon receipt of 
individual items of information. As soon as practicable, the parties shall agree.to 
mechanisms and procedures, including the TTIC, JTTFs, and, if appropriate, focal pomts, 
for DHS to malce, and covered entities to respond to, such requests. These mechanisms 
and procedures shall be designed to facilitate the greatest amount of additional 
information sharing consistent with strictly necessary protection of intelligenceior 
sensitive law enforcement sources and methods, with Section 3(a) and other relevant 
provisions of this Agreement, and with the timeliest possible responses to requests for 
additional information. 

(k) Information Use Restrictions, la general, parties shall disclose covered 
information free of any originator controls or information use restrictions. Several 
categories of covered information that must be disclosed to covered entities pursuant to 
the DHS Legislation, this Agreement, and other authorities, remain subject to special 
labeling, handling, storage, use and access auditing requirements imposed by statute or, to 
the extent consistent with the DHS Legislation. Presidential Directives, the President's 
announced policies for protecting against tcnrorisi threats lo the homeland, and this 
Agreement, pursuant to applicable regulations. The scope and duration of such 
restrictions, including caveats restricting use of the disclosed information to a particular 
level or element of a covered entity, will be tailored to address the particular situation or 
subject matter involved. Vd'hcn imposed, use restrictions shall be no more restrictive than 
strictly necessary to accomplish the desired effect. 

(I) Secondary Information Sharing. To the extent consistent with this 
Agreement, covered entities may share information provided by other covered entities 
with additional covered entities. Such secondary sharing shall be carried out, to the 
greatest extent possible, in a manner that pennits the originating agency to know to 
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whom the infonnation has been provided. The parties shall agree, as soon as is 
practicable, upon recommendations, if any, for changes to Executive Order 12958, 
Dirwtor of Central Intelligence Directive 6/6 (and complementary or successor directives 
dealing with Originator Controls, the so-called "third agency rule," and other policies or 
procedures governing the sharing ofreceived information with additional recipients) in 
order to comply with the DHS Legislation, and to cany out the President's announced 
policies for protecting against terrorist threats to the homeland, and the provisions of this 
Agreement. 

(m) Other Obligations to Share Information. A covered entity's voluntary or 
obligatory provision of covered infomtjation to another covered entity does not in itself 
discharge or diminish any other obligation the providing entity may have to provide that 
information, or any part of it, to any other deparmieni, agency or other public or private 
organization or individual under any statute. Presidential Directive, or other agreement. 
Although all covered entities will attempt to identify and call attention to information 
relevant to the mission of other covered entities, the responsibility to share infomiation 
relevant to the mission or responsibilities of any covered entity in addition to DHS 
remains the responsibility of the originator or initial federal recipient of the information 
and does not shift to DHS by virtue of DHS' receipt of the information. The parties 
agree, however, that, to the greatest extent possible, other sharing obligations shall be 
harmonized and coordmatcd with those covered by this Agreement, including the agreed 
preference for using theTTIC and STTVs as information-sharing mechanisms, in order to 
reduce duplication, fadlitate dcconfliction, and increase efficiency. 

(") '*^7';^'07y4c//«ybnnarfon. Law enforcement-related information related 
to DHS mission, permitted or required to be provided to intelligence agencies under the 
PATRIOT Act and its implementing guidelines shall also be considered covered 
information under this Agreement and shall, therefore, be provided to the Department and 
other covered entities, in accordance with the DHS Legislation and other relevant 
statutory provisions, and this Agreement. 

(o) Other intelligence Information. Nothing in this Agreement shall be read 
to restrict the access of the Secretary or his designee to information the Secretary 
ordinarily would receive as a member of the Intelligence Community, including national 
security and foreign intelligence information. 

(p) Information Sharing Mechanisms. As soon as practicable, the parties shall 
agree upon specific mechanisms, consistent with Section 3 and other relevant provisions 
of this Agreement, for how different types of covered infonnation will be shared, 
including technical and administrative arrangements, and, as appropriate, designation of 
focal points, to maximize the effectiveness and coordination tor providing covered 
information. Sub.sequent arrangements for information sharing may be reached upon the 
approval of the parties or their designees. The parties shall work to develop, as part of 
this process, effective mechani.sms for covered entities to identify covered information 
held by them and to ensure, to the greatest degree feasible, the provision of such 
infomiation. without specific request, to other covered entities. The parties further agree 
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that, notwithstanding their agreement to develop fiulher mechanisms and procedures for 
information sharing, covered entities shall promptly build on mechanisms and procedures 
already in place to identify and provide to DHS covered information that is generated or 
received by them in the course of carrying out their missions. 

(q) Methods of Providing Information. The parties recognize and agree that 
there arc many possible methods for "providing" information, including, but not limited 
to. hand-delivery, oral bncfings, transmission by secure data-link, and affordmg routine 
and unrestricted a.cc£s,s to computerized databases, mcluding the ability to transfer such 
information to a recipient entity as necessary, and by full and complete co-location of 
analysis or other personnel and hill jntcgrauon of, and access to, information, as well as. 
for example, ensuring that the Secretary receives all daily threat briefing materials 
(including threat matrices and overnight reports). The parties further agree that 
requirements to "provide" infomiation under this Agreement may be satisfied, depending 
on the type of information at issue, by the use of a single mechanism, such as via the 
TTIC, consistent with section 3{f) of this Agreement, or a combination of mechanisms 
already in place and/or created under this Agreement. The parties shall agree, as part of 
the development of these mechanisms and procedures, as to which method, or 
combination of methods, of providing infonmation will be sufTictcnt for particular types 
or categories of information. 

(r) Responsible Officials for Information Sharing. Until such lime as 
modified by the parties, the responsible otTtcials tor information sharing under this 
Agreement are as follows: 

(i) For the Secretary' of Homeland Security, the Undersecretary for 
Information Analysis and Infrastructure Prolcciion, or another individual 
designated by the Secretary to act in this capacity; 

(ii) For the Attorney General, Executive Assistant Director for 
Countertcrrorism and Counterintelligence; and 

(iii) For the Director of Central Intelligence, the Associate Director of 
Central Intelligence for Homeland Security. 

(s) Provision of Covered information to the DHS Directorate of Information 
Analysis and Infrastructxire Protection Until further agr«xment by the parties, or their 
designees, all covered information provided, including information provided, under 
current procedures, to existing elements transferred to DHS, e.g., the United States Coast 
Guard and the U.S. Customs Service, shall aKso be separately provided to the Directorate 
of Information Analysis and Infrastructure Protection, including, if agreed by the 
Secretary, via the TTIC. The Undersecretary for Information Analysis and Infrastructure 
Protection, or another individual designated by the Secretary to act in this capacity, shall 
work with entities not within the Direaorale to ensure effective coordination of 
information. 



(t) Classified Information. The head of each covered entity shall put 
procedures in place to ensure that each individual recipient of classified information has, 
and maintains, appropriate security clearances, training, and need-to-know to receive 
classified information at the level at which the recipient will receive such information. 
Individuals shall be designated at each covered entity at several levels of seniority to 
receive classified information judged by the originating agency to be sufficiently 
sensitive to require limited distribution. In rare cases, the parties expect that extremely 
sensitive information may be provided only to the Secretary or, as appropriate, the head 
of another covered entity. The head of each covered entity also shall ensure that all 
mechanisms and procedures for receiving, storing, and handling classified infonmation 
meet established legal and regulatory standards. The policies and procedures governing 
access to covered information under this Agreement, including such information that is 
classified, shall apply without regard lo whether that information is made available in 
written, oral, or electronic form, or to the means or mechanism by which it is 
communicated to the recipient. 

(u) Thresholds. In order to ensure that the Department is provided with all 
information necessary to carry out its responsibilities, but is not inundated with 
unmanageable volumes of information below thresholds reasonable to perform its 
mission, as soon as practicable, the Secretary shall advise the odncr parries, individually 
or collectively, as to establishing additional thresholds for information sharing, consistent 
with the DHS Legislation. For example, the Secretary may detcmiinc that low-level 
information concerning purely indigenous foreign terrorist groups with no apparent 
capability to mount operations against the United States is not relevant to DHS' mission. 
Such further agreement shall be consistent with the DHS Legislation and other relevant 
statutory authorities. Presidential Directives, the President's announced policies for 
protecting against terrorist threats to the homeland, and this Agreement. At any time 
following such initial agreement, the parties may agree to additional information sharing, 
or to more or less restrictive thresholds, as the volume of information involved and the 
needs of DHS become clearer, so long as such agreements arc consistent with the DHS 
legislation and this Agreement. Such agreements may be made by designees of the 
parties. 

(v) Privacy. All information sharing pursuant to this Agreement shall be 
consistent with applicable privacy laws. 

4. Coordination. Deconfliction. and Dispute Resolution . 

(a) Coordination and Deconfiiciion Policy. Consistent with the President's 
direction thai our highest priority is the protection of the American people from 
potentially devastating terrorist attacks, covered entities shall take all necessary measures 
to ensure that terrorist threats to our homeland are addressed cooperatively, efficientiv, 
and with the understood overriding purpose of prcvcniine, preempting, and disrupting 
those threats. To that end, the parties agree that no homeland security-related prevention, 
preemption, or disruption activity of any covered entity shall be presumed to be the best 
option in any given case, or otherwise deemed of higher precedence, importance, or 
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priority than any other such activity. The covered entities shaJI work together, to the 
greatest extent possible, to achieve, in each case, the maximum preventative, preemptive, 
and disruptive effect on potential threats, including coordinating simultaneous and 
complementary activities of muJlipIe covered entities when appropriate. Because the 
failure to coordinate operational activities to preempt, prevent, and disrupt terrorist 
threats can create confusion, inefficiency and, in extreme cases, dangerous situations 
resulting from conflicting operational activities, the parties agree to coordinate, 
operational activities to the greatest possible extent. Specifically, each party shall take all 
reasonable steps to ensure coordination and deconfliction of homeland security-related 
law enforcement, intelligence or national security-related activities of covered entities 
under that party's authority with such activities of other covered entities. 

(b) Analytic Conclusions and Supporting Infornwtion. Terrorism and other 
homeland-security related analytic efforts of all covered entities must be informed by the 
most comprehensive, accurate, and timely information available, regardless of its nature 
and source, including, but not limited to, tenrorism, WMD, vulnerabilities, and other 
pcrtment information available to any covered entity. Analytic conclusions relating to 
terrorist or WMD threats to the homeland, or other issues within the responsibility of 
DlIS, including information updating and amplifying previous conclusions, must be 
shared with all covered entities as soon as diey are produced. Preemptive, preventative, 
and disruptive actions by all covered entities must be informed to the greatest extent 
possible by all available infonnation and by all analytic conclusions, including competing 
conclusions, of all entities with relevant analytic responsibilities. At the same time, the 
Federal govenunent must, to the greatest extent possible, speak with one voice to state 
and local officials, private industry, and the public, in order to prevent confusion, mixed 
signals, and, potentially, dangerous operational conflicts. In fiirtherance of these goals, 
the parties agree as follows: 

(i) The parties shall ensure that covered entities disseminate their 
terrorism or other homeland security-related analytic products without delay to 
other covered entities that have related biterests and responsibilities; 

(ti> Except as otherwise provided in Sections 4(bXiii) or (iv), no 
analytic conclusions, as defined in Section 2(a) of this Agreement, of any covered 
entity shall be disseminated to state, local, or private sector officials, or to the 
public, without the prior approval of the Secretary of Homeland Security, his 
designee, or in accordance with approval mechanisms, potentially including the 
TTIC or the JTTFs, established by the Secretary after the date of this Agreement. 

(iii) Analytic conclusions may be provided directly to such officials or 
to the public where tlie head of a covered entity or his or her designee reasonably 
determines that exigent circumstances exist such that providing an analytic 
conclusion pnor to required approval is necessary to prevent, preempt, or disrupt 
an imminent threat of death or serious bodily injury or significant damage to U.S. 
mfrastructure or other interests. In the event an analytic conclusion is 
disseminated pursuant to the exigent circumstances exception in this paragraph, 
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the Secretary and other covered entiUes shall be notified immediately of the 
dissemination. 

(iv) Analytic conclusions may be shared with federal, slate, and local 
law enforcement officials without the prior approval of the Secretary of 
Homeland Security, provided, however, that it is the intention of the parties that 
DHS be provided with the earliest possible advance notice of the potential of such 
communications and, where possible, DHS will be included in the development of 
the communications through the DHS liaisons at FBI Headquarters. The 
Secretary of Homeland Security, or his designee (including a DHS representative 
to a JTTF if designated by the Secretary to do so), must approve further 
dissemination of such analytic conclusions to other non-law enforcement state and 
local officials or to the public. 

(v) Nothing in this Agreement shall prevent covered entities from 
coordinating on analytic conclusions with, or seeking the views of, other Federal 
Government entities in evaluating terrorism or other homeland-security-related 
information. 

(c) EstabJishment of Mechanism for Operational Coordination and 
Deconfliction. As soon as practicable, the parties shall agree upon specific mechanisms, 
including technical, administrative, and, as appropriate, designation of focal points, to 
maximize the effectiveness of operational coordination and deconfliction. These will 
cover both overseas and domestic operations related to homeland security. Subsequent 
agreements for operational coordination and deconfliction may be reached upon the 
approval of the parties or their designees. 

(d) Information Sharing Dispute Resolution. Consistent with the DHS 
Legislation and other relevant statutory authorities, Presidential Directives, the 
President's announced policies for protecting against terrorist tlucats to the homeland, the 
obligation to protect intelligence or sensitive law enforcement sources and methods from 
unauthorized disclosure, and with Section 3(a). and other relevant sections of this 
Agreement, issues concerning the application of the terms of this Agreement in any 
specific context with respect to whether particular covered information should be 
provided to the Department or to any other covered entity shall be handled under the 
following procedures: 

(i) A holder of particular covered Information at issue, whether within 
or outside the entity originating that information, shall refer the matter by the most 
expeditious means to the head of the entity originating the information (or 

that official's designee) for expeditious review, 

(ii) The reviewing official shall, without exception, render a definitive 
decision on the request within 24 hours of receiving the referral and, in light of 
the access provisions in the DHS Legislation, shall resolve any doubt in favor of 
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(iii) If the originating agency's reviewing otTicial declines to provide 
the covered information requested, that official shall, within the 24 hours allotted 
for response, provide the Department or other covered with — 

(A) the fact that the specific information is being withheld; 

(B) a succinct and specific statement of the reasons for the 
withholding; and 

(C) as much of the information requested as the head of the 
originating agency (or that official's designee) reasonably concludes can 
be provided given the President's announced policies for protecting 
against terrorist threats to the homeland, the DHS Legislation and other 
relevant statutory authorities, and relevant Presidential Directives. 

(iv) If, at that point, a compromise is not reached expeditiously, the 
dispute will be resolved either by the Secretary, Attorney General, and DCl by 
mutual decision or through referral to the Assistant to the President for National 
Security Affairs and Assistant to the President for Homeland Security Affairs, or 
their designees, for resolution. Notwithstanding any other provision of tins 
Agreemeni, the Attorney General, Secretary, or DCl, or their deputies may, 
whenever any of them deems it necessary or advisable (particularly when a 
fundamental matter of policy is implicated or time is of the essence), intervene to 
raise and resolve any issue of access to covered infonnation by mutual decision or 
through the National Security Council and/or Homeland Security Council system. 

(e) NSPD-8. Nothing in this Agreemeni in any way alTecls the 
responsibilities and authorities for coordination of United Slates counter-terrorism 
activities established in National Security Presidential Directive (NSPD) 8. 

5. Protection of Intelligence and Sens i tive l^w Enforcement Sources and Methods . 
The parties intend that all provisions of this Agreement be interpreted consistently wuh the DCI's 
statutory responsibility to protect intelligence sources and methods from unauthorized disclosure 
and with similar responsibilities of the Attorney General and the Secretary to protect .<;cnsitivc 
law enforcement sources and methods, with the DHS Legislation and other relevant statutory 
authorities, Presidential Directives, the President's announced policies for protecting against 
terrorist threats to the homeland, and with Section 3(a), and other relevant provisions of this 
Agreement. Consistent with this agreed-upon interpretation: 

(a) The DCl shall carry out his responsibilities for the protection of 
intelligence sources and methods, and die Secretary and Attorney General shall carry out 
analogous responsibilities for sensitive law enforcement sources and methods, in a 
manner, and through mechanisms, tliat ensure that all covered infonriation is made 
available promptly to the Dcpannicnt, and to other covered entities with a necd-to-know 
and proper security clearances and handling procedures in place, subject only to such 
handling and use restrictions as are strictly and unavoidably necessary to protect 



intelligence and sensitive law enforcement sources and methods from unauthorized 
disclosure. 

(i) The DCI shall ensure that the substance of all covered information 
relevant to the responsibilities of all covered entities is provided to those entities 
in a form suited to their effective use of that information, consistent with the 
DCI's obligation to protect intelligence sources and methods from unauthorized 
disclosure and Section 3(a) of this Agreement. The Secretary and the Attorney 
General shall similarly ensure that llie substance of covered information is 
provided in a suitable form. 

(ii) The DCI shall ensure that dissemination of classified reporting 
based, wholly or in part, on covered information, is accompanied by dissemination 
of as much of that reporting and covered information as is possible at an 
unclassified (which may, when necessary, be marked "Sensitive-but-Unclassified" 
or "SBU") or reduced classification level, in order to ensure the broadest possible 
availability and use of covered information by those with a need-to-know that 
information (or information relating to that subject matter), based on a broad 
interpretation of the mission of the other covered entity.; The Secretary and the 
Attorney General shall similarly ensure that dissemination is done in a manner 
that ensures the broadest possible availability. 

(b) Information may be redacted or put into a tailored product to the extent 
consistent with Section 3(i) of this Agreement. 

(c) Nothing in this section relieves any member of the Intelligence 
Community that originates covered information from its obligation to provide that 
information to DHS and other covered entities, as appropriate, in a form consistent with 
this Agreement, the DHS Legislation, and other relevant statutes and authorities 
regarding the protection of sources and methods. 

6. "Sanitizaiion* and Modification of Classification Levels for Further Sharint; by DHS . 

(a) Consistent with the President's announced policies, our national priorities, 
including this section, Section 3(a), and other relevant provisions of this Agreement, the 
DHS Legislation and other relevant statutes ajid Presidential Directives, covered entities 
that originate covered information that is classified shall retain the authority to determine 
whether that information, or any portions thereof, must remain classified in the interest of 
national security. 

(i) Covered entities shall ensure that covered information that is 
classified or otherwise subject to restricted dissemination, but which reasonably 
appears likely to require onward passage to state, local, or private sector officials, 
the public, or other law enforcement officials for ilsc in a criminal investigation, 
reaches DHS promptly with accompanying high-content "tear lines" suitable for 
onward passage at an unclassified level. Until this can be achieved 



17 



simultaneously to the transmission of covered information, the development of 
such tcarlines shall not delay the provision of covered information. 

(ii) The parties shall ensure, to the greaiesi extent possible, that 
covered entities utilize agreed-upon standardized formaltmg for preparation of 
tcar-iine material for passage to state, local, or pnvale sector officials, including 
state and local law enforcement oftlcials for use in a law enforcement 
investigation, or to the public, with the goal of providmg necessary substantive 
information, but not enabling recipients to determine the originator, within the 
Federal govemmem, of the information. 

(b) DHS may, on its own initiative or at the request of a homeland security 
oflicial to whom covered information is disseminated, ask that the originating agency 
declassify or leduce the classification level attached to tliat information in order to permit 
disseiuiiiatioii to additional officials who have a need-io-know the information, to 
promote case of handling by those authorized to review it, to permit its incorporation into 
a document that is unclassified or classified at a lower level, or for other purposes 
consistent with the need promptly to provide homeland security officials with all relevant 
covered informatiun that they have a nccd-to-know in the conduct of their official duties. 
Whenever it receives such a request, the originating agency shall respond to DHS. within 
24 houHi for such longer period as is agreed to by all parties), unless compelling 
circumstances exist to require a longer response time. Such response will either - 

(i) agree to declassify or reduce the classitlcation ievel of the covered 
information in question as requested; or 

(ii) provide an alternative formulation responsive to the requester's 
need for additional information sharing, but without declassifying or reducing the 
classification of the original document or covered information where that cannot 
be done consistent with assuring tlie national security. 

(c) Where the need by DHS for further dissemination of classified 
information received from other covered entities, including tlirough declassification or 
the preparation of unclassified tear-lines, is urgent because that information contains or 
may contain terrorist threat indications critical to the ability of homeland security 
officials to prevent, preempt, or disrupt a possible terrorist attack, that infonnation may 
be passed directly to the entity or official that has a necd-to-know that information, 
provided ihai the covered entity passing the information first notifies the originating 
agency and takes steps reasonable under the exigent circumstances to protect whatever 
classified mformaiiou is not essential tu initiating the urscnl homeland security assurance 
measures tliat may be required. 

(d) The panies agree to develop together, as soon as practicable, mechanisms 
and procedures, including through the use of detailees and assignees to the TTIC and 
J11 Fs, as appropriate, to carry out the provisions of Section 6. The parties agree to work 
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together to ensure thai the administrative, financial, and personnel burdens of this section 
are shared to the greatest extent possible among covered entities. 

7- Detail or Assignment of Personnel. To facilitate the information sharing, 
coordination, and deconfliclion policies covered in this Agreement, covered entities shall detail, 
and/or assign, to the greatest extent possible, including to the TTIC and/or JTTFs, personnel who 
have the authority either to make classification review and redaction decisions themselves, or, 
consistent with the time frames established in this Agreement, to refer those decisions to the 
appropriate officials at the originating agency for prompt action. 

8. DHS Participation in Requirements Prpcesses . As soon as practicable, the parties 
shall modify existing mechanisms and processes for prioritization of terrorism, WMD and other 
relevant foreign intelligence collection (including within the United Stales) and requirements 
processes to ensure that DHS has meaningful participation at each stage and level of each such 
mechanism or process, including through participation in the TTIC. The parties also shall work 
together to provide recommendations as to whether, and how, processes or mechanisms for 
purely "domestic" Icrrorism (e.g., concerning the capabilities, plans and intentions of exclusively 
domestic white supremacist or militia groups), and other relevant intelligence collection should 
be created or, alternatively, how to ensure meaningful participation by DHS in the prioritization 
for gaihenng such information. This section does not refer to operational activities. 

9. Databases . The parties agree to establish procedures and mechanisms to provide 
DHS, and. as appropnate and practicable, other covered entities, with access :o databases 
containing covered infonmation. To this end. the parties shall establish a working group, within 
30 days of the date of this Agreement. Developed procedures and mechanisms, including 
through the use of the TTIC and/or JTTFs. should be consistent with the DHS Legislation and 
other relevant statutory authorities. Presidential Directives, the President's announced policies 
for protecting against terrorist threats to the homeland, and the appropriate needs for access by 
DHS to appropriate databa.ses, as well as with the protection of intelligence or sensitive law 
enforcement sources and methods, and with Section 3(a) and other provisions of this Agreement, 
Such procedures and mechanisms should facilitate, to the greatest possible extent: case and 
speed of information exchange; differentiated access, to allow iruiividuals with different levels of 
security clearance and need-to-know to have different levels of access to databases; and 
compatibility with other databases of covered entities. 

10- Statement of Intent Concerning Information Technology . It is the intent of the 
parties to build and modernize all relevant databases and other information technology systems 
in order to ma.ximizc compatibility with other systems with which tlicy must interact Such 
procedures and mechanisms also must comply with existing statutory and Presidential 
Directives, including with regard to ihc protection of classified inionnation and applicable 
privacy protections. 

1 1 . Handling and Storage . The parties shall ensure that covered entities within their 
jurisdiction observe the established handling and storage standards appropriate to the 
classification and access rcsunaions indicated on covered infonnation they receive, use, and 



19 



disseminate, subject only to the provisions of this Agreement peilaining lo exigent 
circumstances. 



•2- Inforrn^lign c<>l| ec<e<j qnd shared b y foreign govemmer^ ».f This Agreement 
conterapJates a separate Memorandum of Understanding, consistent with this Agreement, bemg 
agreed to by the parties, that addresses concerns related to information collected and shared bv 
Foreign governments. 

<a) Each of the parties shall implemeni their responsibilities under this 
Agreerncnt as to the covered entities under their jurisdiction through such binding 
regulations, orders, directives, and guidance as necessary or prudent from time to time. 

(b) Any authority or duty assigned herein to the Attorney General, the 
Secretary, or the DCI. may be delegated to one or more subordinate officials at the 
discretion of the official to whom the authority or duty is assigned, except as othenvise 
provided m this Agreement. Each such delegation shall be promptly communicated to all 
other parries. 

No Private RiahLs CreAieA These procedures are not intended to and do not 
create any nghts. privileges, or hencfit.s. sxxbsimuve or procedural, enforceable by any individual 
or organization against the United States, its departments, agencies, or other entities, its officers 
or employees, or any other person. 

' ^- Counterpart Signamres. This Agreement may be signed in countcrpans, each of 
which shall be considered to be an original. 

s/s 

3-4-03 



Attorney General Dale 



s/s 



MAR 04 2003 



Director of Ccntrallnteiligence Date 



VS 



— ____ Feb. 2S. 2003 

Secretary of Homeland Security D^ig 
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Executive Order 13388 of October 25, 2005 

Further Strengthening the Sharing of Terrorism Information to Protect Americans 

By the authority vcslctl in nic as I'rcsidcnl by the C onsliiulion and the laws of the \ iiited States 
ol" America, includinti -cvL.'.'!- ur ,, ofihc liitelligeiiee Rclbmi and Terrorism Prcvemion Act of 
2u()-4 (Public Law 108-458). and in order to I'lirther strengthen the elTcctive conduct oi l 'nited 
States countcrterrorism activities and protect the territory, people, and interests of the I nited 
Slates of Ameiica. including against terrorist anacks. it is hcreb\ ordered as Iblknvs: 
Section i. Policy. To the ma.\inium extent consistent with applicable law. agencies shall, in the 
design and use ol imbrmation systems and in the dissemination ol inlbrmation among agencies: 

(a) give the highest priority to (i) the detection, prevention, disruption, 
preemption, and mitigation of the elTecls of terrorist activities against the 
territory, people, and interests of the I 'nitcd States of America: (ii) the 
interchange of terrorism information among agencies; (iii) the interchanue ot" 
terroiism information between agencies and appropriate authorities of State, local, 
and tribal governments, and between agencies and appropriate private sector 
entities: and (iv) the protection of the ability olagencies to acquire additional 
.such intormatioii: and 

(b) protect the freedom, information privacy, and other legal rights of Americans 
in the conduct of activities implementing subsection (a). 

Sec. 2. Duties of Ilcids (^.Agencies Possessing or Actpiiring I crrorism Inlormalion. To 
implement the polic;. set Ibrth in .section 1 of tiiis order, the head of each agenc\' that possesses 
or acquires terrorism intbrmaiion: 

(a) shall promptly give access to the terrorism inlbmiation to tlie heati ot each 
other agenc> that has counterteirorism functions, and pro\ ide the terrorism 
information to each such agency, unless otherwise directed by the President, and 
consistent with (i) the .statutory responsibilities of the agencies providing and 
recei\ing the infonnation: (ii) any guidance i.ssued by the .Attorney (ienerai to 
fulfil: the policy set forth in subsection 1(b) of this order: and (iii) other applicable 
iau. including .sections 102A(g) and (i» of the National Securi;\ .Act of |t>47. 
.section 1016 of the Intelligence Refomi and Terrorism Pre\ention .Act of 2004 
(incl.iding any policies, procedures, guidelines, rules, and standards issued 
pursuant thereto), sections 20.1 and 8<)2 of the Homeland Security Act of 2002. 
Executive Order 12')58 of April 17. IW.^. as amended, and i :xeculive Order 
13.111 of.Iuly 2y. 200.1: and 

(b) shall cooperate in and facilitate production of reports ba.sed on terrorism 
inlonnation with contents and formats that permit dissemination that maximizes 
the utilii\ t>f the inlbrmation in protecting the lerritor>-. people, and interests of the 
I 'nitcd States. 

Sec. .1. Preparing l errorism Information for Maximum Distribution, l o assist in expeditious and 
eflective implementation by agencies of the policy set Ibrth in section I of this order, the 
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common siaiidards :or ihc sharing of icrrorism inrormalion established pursuant to section .1 of 

of August 27. 2004. shall bo used, as appropriate, in earn ing uul . . . 
of the imdligonce Refonii and Terrorism Prevention Ael of 2004. 
See. 1 Requiremen-s for Coileetion of Terrorism Intbnnalion jri.side the United .States. To assist 
in expeditious and irffeetive implementation by agencies of the policy set forth in section 1 ol" 
tiiis order, the recon .mendalions regarding the establishment of executive branch-wide collection 
and .sharing requirements, procedures, and guidelines for terrorism inJbmiation collected within 
the I'nited Slates made pursuant to .section 4 of lixccutivc Order 13356 shall be used, as 
appropriate, in carrying out • ■ . of the Intelliuence Reform and Terrorism Prevention 

.'\et of 2004. 

Sec. 5. Hstablishment and Functions of Information Sharing Council. 

(a) Consistent with section 1016(g) of the Intelligence Reform and Terrorism 
Prev.-niion .Act of 20O4. there is hereby establisiied an Information Sharing 
Council (Council), chaired by the Program Manager to whom section 1016 of 
such .Act refers, and compo.scd exclusively of designees of: the Secretaries of 
Stale, the Treasury, Defense. Commerce, Energy, and Homeland Security: the 
Atiomey General: the Director of National Intelligence: the Director oilhe 
Central Intelligence Agene> : the Director of the Oflice of Management and 
Budget: the Director of the Tederai Bureau of Inv estigation: the Director of the 
National Counterlerrorism Center: and such other heads of departments or 
agencies as the Director of National Intelligence may designate. 

(b) I he mission of the Council is to (i) provide advice and information concerning 
the establishment oi an interoperable terrorism information sharing environment 
to lacililale automated sharing of terrorism information among appropriate 
iigencies to implement the policy .set forth in section 1 of this order: and (ii) 
perform the duties set forth in section 1016(g) of the Intelligence Refonn and 
Terrorism Prevention .Act of 2004. 

(c> To assist in expeditious and effective implementation by agencies of the policy 
set I'orth in section t of this order, the plan for establishment of a proposed 
inler<ipcrablc terrorism information sharing en\ ironment reponed under .section 
5(c) of Hxecutive Order 13356 shall be used, as appropriate, in carrying out 

i>fthe Intelligence Reform and Terrorism Prevention .Act of 2004. 
Sec. 6. Defmitions. .As used in this order: 

la) the term "agency" has the meaning set forth for tlie term "executive agency" in 
section 105 of title 5. T nited States Code, together w ith the Department of 
Homeland Security, but includes the Postal Rate Commission and the I niled 
States Po.stal Ser\ ice and excludes the Ciovemmcnt .Accountability Office; and 
(b) the term "terrorism information" has the meaning set forth for such term in 
section 1016(a)(4) of the Inlelligence Reform and TeiToristn Prevention .Act of 
2004, 

Sec. 7. Gef.eral Pro\isions. 

(all his order: 

(i) shall be implemented in a manner consistent with applicable law. 
including Tcderal law protecting the inlbnnalion privae\ and other legal 
rights of .Americans, and subjecl to the availabilir\ of appropriations: 
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(ii ) shall be iniplemoiitcd in a manner eonsistent with (he authority of the 
principal orikcrs ol agencics as lieads of their respective agencies, 
includinu under section 199 of the Revised Statutes (22 U.S.C. 2651 ). 
seciion 201 of the Departmem oflineryy Organization Act (42 I '.S.C. 
7131 ). seciion 10? ofthe National Security Act of 1947 (50 U.S.C. 40>-.>). 
section lU2(a) ol the Homeland Security Act or2(){)2 (6 L.S.C. 1 12(a)). 
and sections M)] of title 5. 1 13(b) and 162(b) ol tille 10. 1501 of title 1.^ 
50.3 of title 28, and 301(b) ot titlc 31. United Slates Code: 
(iii) shall be implemented consistent with the ; ; . ..-.ir 

'. on "Strengthening Inlomiation Sharing. Access, and 
Integration Organizational. Management, and Policy Development 
Structures for Creating the Terrorism Information Sharing Environment:" 
(i\ I shall not he construed to impair or otherwise affect the functions ot 
the Director of ihc Office of .Management and Budget relating to budget, 
administrative, and legislative proposals; and 

(v) shall he implemented in a mamier consisleni with seciion l()2.'\ ol the 

National Security Act of 1 947. 
(h) This order is intended only to improve the iniernal management ol the Federal 
Go\ernmcnt and is not intended to. and does not. create any rights or benefits, 
subs'. jnti\ e or procedural, enforceable at law or in equity b>- a pjiny against the 
L nitcd States, its departments, agencies, instrumental iiics. or entities, its officers, 
employees, or agents, or any other person. 
Sec. 8. Amendments ;md Revocation. 

(a) Hxccutivc Order 1331 1 of July 29, 2003. is amended: 

(i) by .striking "Director of Central Intelligence" each place it appears and 
inserting in lieu thereof in each such place "Director of National 
Intelligence": and 

(ii) by .striking "103(c)(7)" and inserting ui lieu thereof "102.\(i)( 1 )". 
<h) of .August 27. 2004. is hereby revoked. 

(.signed: I Cieorge \V. IJush 

THIi WHITE HOl'Sh. 
October 25. 2005. 
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MICMORANDUIVl FOR HKADS OF DIOFARTMIiNT COMI'ONKN T.S 

iTom: l lic Deputy Atlorncy General 

Siilijccl; Dcparlmcni ol Justitc I'rolocol Rcgurding Tcrrorisl Walchlisl Noiniiuilions 

Tlic aliacliecl prolncol reflects a new policy for the Department's internal process lor 
nominating iiulivicluais Ibr the 'I'morisl Scrceiiiiig Database ( TSDli). 

Tlic TSDB cotisulidalcs the U.S. Govcinmenl's terrorism .screening and lookout databases 
into u single in'.ceialcd identities database. The TSDB is also known as the "vvalchli.st." 
This protocol is designed to ensure consistent and appropriate handling of watchlisi 
inlbrmalion. The protocol responds to i.ssiics raised by the report ol lhc Inspector 
Ciencral, dated March 14, 2008, entitled "Audit oTlhc U.S. DcparlinenI ol'Jiislice 
Tcrrnri.st Watchlisi Nomination I'roccs.scs." Spccillcally. that report recommended that 
the Dcpartmeii. adopt a general policy for submission ol" watch list nominations, 
implementalion of the attached protocol will accomplish that ta.sk. 

All components arc directed lo ct)mply with this protocol erCecfive immediately. 



DnPARTMi-N'l- 0|- .lUS I ICI- I'RQ-roCOL 
RlvGARDING TI-RRORIS T WA I CI II. IS'!' NOMINATIONS 

A. H]ick}> round 

1 . Un September 16, 2003, the President directed the Attorney General in Homeland 
Security PiesideiUial Directive 6 (HSI'D-r)) to "establish an organi/.atiofi to con.solidale 
the Government's approach lo terrorism screening and provide lor the appropriate and 
lawful use ol": crrorist Information in screening processes." Terrorist Information was 
specifically defined lo mean "individuals known or appropriately suspected to be or have 
been engaged in conduct cotistiluting, in preparation for. in aid of, or related lo 
lcrrt)rism." 

2. Goncurrenl with the signing of J ISI>D-6. the Mcmorandtmi nf Unc/t-rxtantlhig nn llic 
I'lin^iiivdun unJ Use tif Scrceiiiii}' infurmalion to f'nUcct Af-omst Terrorism ( I SC MOU;, 
was signed by the Secretaries of State and I lomcland Security, the Attorney CJencral and' 
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Ihf iJircclur ol CciUral Intelligence (DCI) (on bdiaiCni lhc enlirc U.S. Intcllitjcncc 
I (immunity). ) lie I .SC MOli cstabli.shcd ihc TL-rnirisl Scrfcniiii; (^'nlcr (TS(.'i lo 
c('n.si>lii.lale ihe CJovernnicnr.s approach to terrorism scrccninj; and provide lor the 
appn priaic aiij lawful use olTerrori.st Inlormalion. a term ciarified hy liie inclusion of 
Tcriori.si klcntilier.s in a .subscqucnl agreement nl the panics I inder I ISPD-O. the I SC 
was t,. develop and maintain a database, lo the extent perniitted by law, containini; the 
most lhonnn!h, accurate, and current inlormation possil»le abt>ul known or suspected 
terruiis!:;. IISI'D-d icquircs that its implementation be consisleni wild Ihe ( :onsliH!ti()n 
and applicable laws, including those proteclinj; the righLs of all Americans, The I SC 
created ihe Te rorist .Screening Database I TSDH) to meci these goals. I hc TSnii 
consolidates the L .S. Govcrnmenl's terrorism screening and lookout databases into a 
single inlegrat.-cl idcniilics database. I hc TSDU is aiso known as the "watchlist. " 

}. 1 he I SC: MOl ' also incorporated all provisions i'l lhc Xtvimnam/iiin ofViith'rsumJin^i 
/•rn-vrn ihi l>iu-lli\icm v Contmumiy. Fctit ral law /^ri/oncincitf Arym it-\. .inti tin 
DflHii lmcnl tij I htm Uiiul Security Conccrnmi; In/aniuilinn Sluirim'.. dated March I, ZOD ? 
tliie "Inlormati. n Sharing MOi;"). 

-4. In JOO l. (he Secretaries of State. Treasury, and l)ercn,sc became signatories to the 
Information Sharing MOIJ by signing .Addendum A lo the TSC" MOl , Ih doing so. they 
agreed that all provisions oCthe I SC MOD and the Inlonnation Sharing MOl • apply lo 
all entities that aic or become a part of their respective Ueparinients. 

A .second aOdendum {.Addendum B), which supplements and incorporates by reference 
all pi . .visions .1 the I SC MOU, .supcr.scded Addendum A and was linali/.ed on Jamiarv 
!X, Ji)l)7. The Directors of National Intelligence, NCTf and Ihe ISC joined as 
signatories in .Vdtlcndum R. Uiulei paragraph (1) (b) of Addendum II the Parlies agreed, 
lo Ihc ma.ximuir. extent pcrmiiicd by law. to "provide to the N( TC on an ongoing basis 
all Terrorism Information (as defined in 

the Intelligenc.- keform andTciTori.sm I'revcniion Act (IKTI'A) of ?.0(M. Section l()l(')(a) 
(•I) |as amended to include bomelanil security information and weapons of ma.ss 
dcslruclioii information] in liicir possession, custody, or control . Paragraph 7 of 
Aildenduni B introduces the term reirorisl Idenlilieis to more clearlv describe the type of 
terrorism information that Nri'C (and the !-cderal Huieau ol Investigation (PBIJ for 
Purely Domestic l errorism Information, as dclincd in the "fSC M( receives from 
inlei agency jiurtncrs and suKscqucntly shares with I SC for inclusion in Ihc TSDU. 

(. i:.Neciilive Order l.l.l.M (August 27, 2004) created the National (.ounlcilerrori.sm 
( enlei (NC fC) lo serve as the primary organizalion in the United States (Government lor 
analyr.ing anti ntegrating all intelligence possessed or acquired by the I 'niled States 
(iovenmieni pertaining to terrorism and eountertcirori.sm. excepting purelv domestic 
o.unieilciroris n information. Dial same provision, however, provides that NC I C may 
receive, retain, and disseminate inlbrmatii.n from anv |-cderal. Stale, or local cover nincnl 
i I ..the, MHiive necessary to fulllll Us rcsponsibihties. giving f<VlL auth.-rilv^o receive, 
r.'laii;. and «lisse:ninate domestic terrorism iiilonnaiinn. 
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7. Section 1021 oClhc Inlclligcncc Kelbrm ;ind rcriorism Prevention Act 0) 2004 
lIR TPA) amended the National Security Act of i9'l7 to codify Die creation ol NC TC. 
Piusiiaiit to IR i PA. NC TC serves "as the central and shared knowledge h:ink on known 
and suspected '.errorists and international terror groups." NC TC's ccnlrali/.cd knowledge 
bank is known as tlie Terrorist Identities Datainart tnvirontnent { TIDI-). Section 102 1(c) 
on Domestic Countcrierrorisni Intelligence slates NC TC "may, consistcnl with applicable 
law, the direction ol the iVcsidenI, and guidelines referred to in section l«2A(b). receive 
intelligence pertaining e.scliisively to domestic counterlerrorism from any I'ederai. Stale, 
or local govcrnnieni or other source necessary to luKill its responsibilities atid retain and 
disseminate such intelligence." 

K To enhance infornuiliun sharing, the I'residcnl issued nxeculive Order 13388. Ftiriher 
Slivrr^flieniiiK lliv Sliiiriiiy, o/Tcironxin Informal uiii lo I'l ulvcl Amcricam (CX-Iober 7..^, 
200.'i\ which requires (he head ofeach agency thai possesses or aciiuires terrorism 
information lo promptly give access lo that informalion to the head ofeach other agency 
tlul has counterlerrorism functions. 

Pursuant to i>aracrnph (2) of HSPf>6, NCI C is mandated lo "provide [TSC:! with 
iiccess lo all appropriate informalion or inlelligence in the [NC I C's| custody, possession, 
t)r control thai TSC| requires lo perform its liuiclions." 

10. T1DI-: serves as ihc .single source Ibr the TSDI). except for Purely Uomcslic rerrorisi\) 
Information, which is piiwidcd directly lo Ihc TSC from the i-UI via a formalized 
procedure. Purely Domestic Tcrrori.sm Information is denned in Ihc TSC MOl.l as "ix . 
hilormation about U.S. persons lhal has been dcicrmincd lo be purely domestic terrorism 
informalion with no link lo foreign intelligence, counlcrinlclligcnce, or inlernational 
terrorism." 



11 . I ID!-. conUini-S the identifying and derogatory informalion on known or jipproprialcly 
suspected inlernational terrorists and the FRI's Automated Case Support svslcrii contains 
siipiicrling information regarding purely domestic lerrorisls. The TSDI) contains the 
idenliliers exported from flDlj and the idcnlilicrs of domestic lerrorisls exported by the 
rm. As a result, ihc TSDB contains the U.S. (iovernmenfs comprehensive dalaba.sc of 
bolh inlcrnalio:ial and domestic I'crrorist Idcnlificrs. 

11. NoniiiiiUin^ Components 

I I he Depannjenl of Justice contains a number ofcomponcnls lhal may acquire 
informat.on regarding domestic or inlernational lerrorisls. These componenls include the 

•m, the 1 SC, Ihc National .Security Division, the Criminal Division, the Civil Rights 

.'ivision. ihe Drug r-lnlorcemcnl Admini.stration, the United Slates Marshals .Service the 
Bureau ol Alcdiol. Tobacco, i-iia.rms, and F.xplosives. The I cderal Uurcau <,f Pri.snnN 

he n-Yeulive Office ol the United Slates Atloincys, Ihe United Slalcs Attorneys, and the 
Umled Slalcs National Central Uurcau. 



2. I ho policy ofthc Dcpailmcnt olJusticc is Ini all compuncnls to provide ihc I'Ul with 
nil domcslic or inicrnalional I crroristn Inlonualion or Tcrroiisl IdcmiHcrs so thai ihc "M 
can niakf appropriate iioininatioiis to the consolidated terrorist walchlist. With one 
exception rel.T.ing to I SC's authority in cxincnt circuinstaiu-cs, only Ihc l-DI is aiithtinzcd 
to nominate domestic or inlernaiioiial tcrroiisls lor inclusion in Die TSUH on heliairol'lhe 
Deparlnient ol Justicc. The I'B! has implemented policies {governing the submission ol 
.such nominations, including procedures to lollow when adding, modifying, or deleting a 
T.SU13 record, in making any proposed recommendation for walchlisling, each l)()l 
component shculd ensure that the underlying inloimation is reasonahly accurate, relevant 
and lunely. In addition, the I SC has implemciUai its Pr<,i,„ til Rnuiniini; Tvmtrist 
\'nv.ma(inm These policies must he followed regarding all nominations Irom the 
'department of Justice 

3. : he r.SC. winch is administered hy the THI and reports to the Altorney (iem ral. 
;>eMiiiiicd to make entries into thc TSDU when e.vigent circumstances c.\isl. .Such 
e.speditcd non inalions iiiuxi he made '.n compliance with the I BI nomination policies and 
the rSC's PmUtail HrnnniinK Tcrmnsi Notiiinntionx. 

•I. The JoliU '!"crit)rism T;isk horccs (J IT'I-) are a nnilli-ageney cffoH led hy the 
Department ofJustice and the l-'RI to comhine and leverage law enfoicement and 
intelligence ccnnnunity resources to protect the United .States from terrorist attacl. .l l'lTs 
arc com|iri.sed of highly trained, locally based, investigators, analysts, linguists, and olliei 
specialists from l ederal. state. Icical. tribal, territorial law enforcement and intelligence 
community agencies. I hc National J TTI- was established in July 2002 to serve as the 
coKriiinating mccl'.anisni for the JTI'l s. 

Deinutmeni of Jiistiec ccvnponents. other than the 11)1 or the I SC . are not pernjitled lo 
make direct n< minations t.^ thcISDH. A Department of Justice coniponcnt should 
inform the appropriate J i l l" through di.s.seminated intelligence rcport.s. electronic 
conmmnicatio:., or other method appropriate to the circumstances when it becomes aware 
oflVriorist hiiorniatioii, Terrorist Idcntillers. or Purely Domestic I errorism Inforiniition 
(collectively. Intelligence Inlormalion). The originating DOJ component should .stale 
whether it recommends watch listing the individual, the basis for that recommendation, 
and the investigative steps, if any, it has undertaken regarding the individual, if the J 1 f I- 
determines that '.he inlbrmation received from another component standing alone or in 
conjunction with other information known to the I BI meets the standards set forth in the 
Alltirney (.icneral'.s (liiidclines I-t opening a preliminary terrorism investigation or a lull 
terrorism inve.Migation and one has not been opened, the I ' it" shal! initiate an 
investigation a.ul shall nominate ea.se subiccts !or inclusion in 'flDI-. and-or Ihc I SDK in 
aecorJancc with l-m policy, by fonvarding all Intelligence Information, .ns appioprialc. lo 
;!ie lUi's Tern risl Review and Hxumination I 'nit (TlUiX) usiim the I D-W3U form and 
process. 

h. i he rclev;uu J'l l l' will ootily Ihc Departmciil of Ju.stice component lli;it Inlcllicencc 
Inlorniatioii provided by that component has been used, in whole -m- in part, as the basis 
l.ir a nomination lo the TSDR or the creation of a recoid in TIDI-. I'o the extent possible. 
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llic relevant J'l'I'I- will assign a rcprcscntntivc iioin the nominating Dcparlmcnl ol Justice 

eomponeiii to parlicipiiic in llic prcliminjiiy or I'lill investigation tluit arises out ul' R' 

nominations Irom Department ol Juslice components. Once notified, the Department 

contponcnl will promptly provide l-UI's TRRX with additions, modificilinns. or deletions 

'.o a particular record as appropriate regarding that intelligence int'ormalion vin the 

component's J H !• representative. 

7. To prevent possible duplicate or |)artial reporting, the NC' TC shall be inlormcd that the 
I'lil and the TSC arc the sole TIDE and/or TSDU nominating agencies (or the 
Department ol Juslice. 

8. 'I he provisions of this Protocol arc not intended to prejiidice. restrict, t)r interfere with 
any other agreement or arrangement orDcparhncnt ol" Justice componenLs, including 
arrangciTienis relatcil ui law cnlorcemeni, exchange of inlbrmalion or countcrlerrorisni 
ellbrts as appropriate. 

All Department ofJusticc components should continue to share Intelligence Inlormution 
as appropriate within the U.S. huelligcncc Community. 
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MKMORANDl i\I OF I NDERSTANDINCi 
ON TI KROklST \VA TCHLIS r UKDRESS PROC F.DL RES 



I Ik- Dcparimciu i»rjiislii:c (DOJ). Hic I cilcial Hiiicaii ol liucsiieiili(ui ( I Ml ). Ihc Icrrorisl 
Scrccninii ( ciilcr ( rS( ' i. ilic DcpariiiKMit ol' I loiiK-laiul SccuriK (DilS). ihc Dcpamnoni olSiaic 
(DOS), ihc Othcc i>r lilt- l)irccl»>r ol" National InlcliiiiciKC ((-)UM ). the Xatioiuil 
( oimlci terrorism I enter (NC'i'C). the Central Inleilii-ence Aiiency (I I A), the Depaitnieni i*!' 
Defense )!)), ami the Deparliiient ol llie Trcnsiiiv iheivinaflcr rclerreti lo a^ llie Parties); 

Kecoiini/iny thai the United Stales (iovemnicnt has ilo\ eloped a eoiisolidaied database of 
known and siispeeled terrorists that supports many dilTerenl soeeninu pmurams operated under 
distinct slaliilory and reyidatoi y authorities; 

Keeouni/iny tlial agencies that eontrihuie liv eon)pilc. distrihiite. and use the consolidated 
daiahase nuisl use lusi elTorls ii» niaintain eiirreni. accurate, and ihorouyh inlonnation: 

Rcci>uni/inii ihal the impleincniaiion ol the sereoniny programs nonetheless mas. ai 
tnne>. still cause inconvenience, delay, or other adverse experiences lor indi\ iduals durinu the 
terrorism screeninu process; 

Kecoiini/ini! that complaints iecei\ed reiiaidini: the lerrori-^m scrcenm-: process should 
be c\pcditit>usl\ rex iewed and addressevi with diynilN and re^pect: 

Kecoiini/mij that the experience i>l travelers ami I'lher iiuiiv iiluaU interaetM)u vvnh 
iiovernmcnl scrcenini: personnel is potentialiv al Teeted In lactors outsiile the lermrism screenini: 
scope ot'ihis Men)oiandum oi l ndoslandini:. inchitlinu. lor exaniple. raniiom sciceujnu, 
screening for involvement vvith illicit drugs or other illciial conduct, behav iota! scicening 
criteria, as well as the basic |:rol"essionalisni and courlesy ol" government screcninu personnel, 
and Ihal attention lo these lactois musi be pmmoted through other appropriate means w iihin the 
respective lurisdieliivns of the I'arlies; 

Recoiini/ing thai i>n January I 7. 2006, the Deparimenis td" Slate anti I lomeland Securilv 
aiinouneed an initiative on "Secure noiders and ( »pcn Doors in the Inlormalion Age." otherwise 
known as the Kice-C heriorf Inilialiv e. including (he eslablishnieni ol a redress process lo address 
perceived problems in inlernaiional and ilonieslie traveler screening: and 

Having consulted with the Privaev aiuU'ivil I ibcilies ( )ver>ighl Moaul and the privacv 
and civ il liberties ollicials <iri)IIS. D( and t )l)M. in devcloiMug the procedures contained in 
this agreement: 

I Icrcbv enter into ihis McnioraiKiiim oi l ndersiaiuling (MOl ). 
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IloinohuKl Scciii iiv PiVMiicniial Diicvlivc 6 ( I ISPI i. • liUv.-iimlion ;iiul I \c ol Scrcaiini; 
Inlunnalinii lo I'mkvi \L•;lil1^l icmuisni." Jalcil Soplciubcr 16. 2()()3. icqiiircil i1k- Atlorncs 
( iciicriil lo csiaUlisli an oruani/aiioii to consolitlalo ihc (iovcrniiK-iirs approach lo terrorism 
.NLivcniim ami pro\ iJc tor the approprralc aiul law liil use of terrorist iiilorinatioii in scrcciiini! 
pri)cc.sse>. AImi on September 16. 2()(l.>. aiul in siippoi t i>r llSPD-6. the Menioraiuiiini of 
I iKlerstandiny on the Inicyration and Use »)rSereeninu Inforniation to IVoteet Ayain.sl TcrroriMn 
(I ISPI)-6 M( )l ') was siuneil by the Secretary of State, the Attorney (ieneral. the Seerelar> of 
1 lomelancl Securily, unci ihc Director of Central Inielliyence establishing ISC. ( )n August 2. 
:(Hl4. an aikkMuiunj ( Ailclendinn A), which siipplenicntecl and incorporated by relerence all 
pr«)\ isions of the I ISIM)-6 MOU. was signed by the Secretary of the I leasiiry and the Scerelar\ 
of Defense, in additicMi lo the signatories of tlie I ISIM)-6 MOU. By their signatures on 
Addendum A. the Secretary ol the I reasury and the Seerelar\' of Defense also became 
Miinat.M ie.s to the I ISi'D-(> M( In 2i)i)7. Addendum A was supcr.seded b\ Addendum B. 
w hich added the Director of National Intelligence and the Director .»f the "I SC as >ignatories. 

2. PCKPOSf . S( OPI ■ ANDCONSTRC CTKlN 

The purpose of this MOC is to set fortli the mutual understanding of the Parties to establish and 
miplcmcnt a ct>i>rdmated retlress process lo respond lo indiv idual c<implaints about adverse 
e\|iericnccs during terrorism screening that relate to the use of information contained ni the 
giwcmment's consolidated database o!' known and siispecled lcrrv>rists. known as the T errorist 
Sciecninu Database or I Sl)!3 fhis \1( M ' is intended to complement, and shall not be constrneil 
toconllicl with, tiie Consiilution. statutes, or regulations of the L nited Slates i>r ain Paris s legal 
authority to process screening-related complaints or appeals. I o tlie eMenl that an> pio\ ision ol 
this M(.H' conlliels wiih any Party's legal auth(H it> lor screening or to hear appeals, the 
eonllicting provisions of ihis M( )U shall not apply. This WOV does not apply lo individual 
ci>mplaints, or |iai ls iherecW". lhat pertain to screening experiences that are unrelated to the u>e ol 
inforniation contained in the TSDB. 

\n\ relerence in this M( )C to a Party or Parties shall also be understood to refer to any 
components of such Partv or Panics lo llie extern that such eompt>nenls fall wiiiiin the dermilion 
«if screening agenc> or nominaling originating agenc\ as set lorth below. v»r lhat such 
components ha\e been designated by the Parts oi Panics as having obligaii«.ns arising Irom this 
\H )C. \iuhmg in this M( )l precludes any Party from conducting periodic re\ iews ol 
indi\ idiials in the I SI )H lo determine whether an indi\ idual should remain in llie I SDB. ha\c 
their I SDB status modiHed. or be removed from ibe I SDB. \oihmg in this VU )l shall be 
construed lo interl'eic w iih. limit, or impede anv Paris s ability to prolcci iulormaiion thai is 
classilled pursuant to I xecuiise Order I2*)5S. as amended, or is otherwise pioteeled bs law from 
disclosure. 
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D. 

As used ill lliis M( Ilicsc terms tir phrases arc cicliiioti iis lollows: ^ 

A. Coiiipliiiiu or Redress L'oiiinhihii : An iiuli\ itluars sialcinciU aboiil an allegedly 

adverse experience or oiilcoine during a lerrorism screening process, wiiicli 

usually includes a request for assistance ox a remedy. 
[\. I.h'n>i>iti(iry lii/oniiti/itiir . I he inrurnialiuu relied upon or generaied by a 

nominating/originating agency lo support the noniination of an individual lo the 

TSDH. 

C. Kiiou ii or Stispcclccl Terriirisf . As deHned by I ISPD-ft. an individual know n or 
appropriately suspected to be or t(» have been engaged in conduct consliluling. in 
preparation ibr. in aid ol', or related to tern>risnv Pursuant to 1 ISPI)-f>. the TSDB 
shall include identilying inlbnnalion about all known or suspected terrorists. 

D. MisuleiilHiCil Person : An indi\ idual who has had an adverse experience or 
outcome during terrorism screening because Ihe individual is a near match i(> a 
known or suspected terrorist in the TSDR. Misidcntilled persons are not actually 
listed in the I SDB but usually share an identical or very similar name and date of 
birth w ilh a person in the I'SDH, which causes ihcm to be delayed or otherw ise 
inconvenienced during screening. 

K. Xoiniihi/iiii! .li-cncy : A Federal agency that has delcrmined that an individual is a 
known or suspected terrorist and nominates that individual lo the I SDB based on 
inl'ormation that originated with that agency and/or a third agency. 

F. On\'iiurii>ii; A\iciHy . A 1-ederal agency that generates derogatory or identifying 
inlbrmation about a know n or suspected tcrrori.-;). 

ii. rcrsoiHillv lih'iiti/iiih/c lit/oriiiaiioir . Any represenialion orinlormation that 
permits the identity ol an individual lo whom the information applies lo be 
reasonably inferred by either direct or mdirecl means including any i>ther 
informaiion, which is linked to siieli imlividual. 

1 1. Rt'iiress : The process whereby an individual may seek the help of a screening 

agency in addressing the cause of an adverse experience or outcome related to the 
use of TSDU data by tiling a complaint with the screening agency. The screeniitg 
agency or its designee, in cooperation w ith I SC and the nominating/originating 
agency, provides assistance by determining Ihe cause of that adverse experience, 
verifying that all relevant informatio?i relied upon in the screening process is 
thorough, accurate, and current, and making any warranted corrections m 
pertinent records. The redress process as defmcd in this patagraph diKS not apply 
to complaints related to the visa application process. 

I. Scrci'iiiin: Agt'iu v : Any agency that conducls terrorism screening. A screening 
agency acquires informalic^n for the purpo.se of determining whether an individual 
is a known or suspected terrorist in the T.SDIi, and evaluates andA»r u.scs that 
information in order lo lake a particular governmental action w ith respect to an 
individual, such as requiring additional physical security .screening at an airport 
security checkpoint, determining adinissibilily into the United Slates, or similar 
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uovornincnuil aclion. The DOS and Dl IS shall nol be consitlcicd screening "| 
agencies with rcspecl in ihe visa applicaiioii process. 9: 
firrorisiii Srivi'itiiiu - The evahialion ol aii individual lo determine wlicllier lie or ^ 
she is a known tir suspected terrorist idenliiietl in the I SDIJ in order to take a 
particular governmental action wilh respect lo an individual, .such as requiring 
addilional physical security screening at an airport secin ity chcckpiunt, 
deternnninu adntissibilitv into the United States, or similar governmental action. 
K. Tcrrnrisi Scn-i'iiinv Duialmsc or TSDli : The Fedeial governmenfs consolidated 
database that contains identi lying inlbrmation about known or suspected 
lerrorists. It is also commonly known as the consolidated terrorist walchlist. I he 
TSDB is a sensitive but unclassilied database and does not cinitain any derogatory 
iiiroMuatioii. 

L. TJlJfi : NC'TC' s TeiTorisl Idcniilies Datamart linvironment ( TIDIi). which is a 
classified database containing the den^galory inlormalion that supports the 
nominations i)!" known or suspected international terrorists lo ihe TSDB. 



4. RESPONSIBILITIES OF Tlll£ PARTIES 

A. Rcsnonsibilities ol All Parties : 

i Desitination of Responsible Orileial . Each Parly will idcntilV a senior 

olTicia! who will be responsible lor ensuring the Parly's lull parlicipation 
in the redress process and overall compliance wilh this M(.)U. A Parly 
may also designate redress ofilcials lor components olThat Party that 
perform screening or nominating/originating agency iiinctions. The 
Parties agree to identilV these officials and exchange the names of these 
olficials no laier lhan 30 calendar days after this MOD becomes elfectivc 
and update the inlormalion as needed iherealler. 

ii. Resources . Subjecl to the availability of funds, each Parly will identi IV 
and commit appropriate stalTand other resources lo carry oul 
responsibilities under this MOU. This includes identi lying the olfice(s) 
responsible for carrying oul the Parly's responsibilities pcrlaining to the 
processing of indi\ idual redress ci>mpliiinis as set forth in this MOLL I he 
Parlies auiee lo c.vchange the names and contact information lor the 
responsible offices no later lhan 30 calendar days alter this MOU becomes 
elfeclive. and update the information as needed iherealler. 

iii. hiformalion Sharing . Iiach Parly will share all inlormalion rckvanl lo Ihc 
resolution of a complaint wilh other Parties lo the e.Menl necessary U) 
eairy oul this MOLl or lo defend any Judicial challenge to the resolution of 
a complainl. consistent with legal rcquiiements and elassillcalitin and 
handling controls. A Parly may provide the relevant inli>rmaiion in a 
summari/.ed or substituted format lo protect sensitive sources and 
methods. 

iv. Proleelion of Personally Identifiable Information , luich Parly will take 
appropriate action lo piolecl perst)nally identifiable information (PI I) in its 
ow n record systems related lo a redress matter against unaudiori/ed access 
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and lo lmisui c iIku PI I is handled in a way lhal provides socm ity and 
accoiiniahilily. When Parlies transmit Pll related lo a redress mailer \ia 
non-eieetronie oreleelronie means, siieh as email, laesimile. portable 
media or otlieruise. llic Parlies will properly mark tiie data and.i>r 
comnuiniealions/media/deviee to pn>vidc appropriate noiiee oftlie 
exislenee of Pll and will ensure the means ol transmission are seeiired In 
encryption or equivalent proteelions. 

Administrative keeord . Luieli Party will be responsible for mainiaininji tht- 
administrative records necessary to document parlieipatiiin m llie 
redress process. 

U pdatint' Auencv Records . Kach Party litai maintains data rchilctl to the 
terrorist walchlisl in its paper and/or electronic reeordkeeping systems will 
update its records (i.e.. correct, modify, or delete) expeditiously once 
nolillcd of a change to an indiviiluaPs watchlist status as the resull of the 
di.sposition of a redress matter. Ibis provision api)lies tii data in 
uovermnenl information systems (e.g.. flDl-, freasury Enforcemenl 
(.'omnuinications .System/lnterauency liorder Inspection Syslcm 
( I LX'S/IBIS). No-Fly List. t\>ii.sular Lookout And .Support System) used 
for watchlist creatitni or scieeninii purposes. It is not inleiuled U> require 
the Parlies lo change records that rclleci actions already taken based on 
watchlist status, unless and only to the exieni that the record will have an 
unwarranted adver.se impact on the iiulividiial seeking redress. 
L.itiuatitm . Subject to paragraph 4.A.iii above, each Parly agrees to 
cooperate with DO.I to a.ssist in defending any Judicial challenge to liio 
resolution of a redress complaint processed under this M(.>L1 or a 
determination by a screening agency that relied in whole or in part i>n 
records or information in the VSDli. This provision shall not he construed 
to limit DOS's di.scielion under section 222l 0 of the Immigration and 
Nationality Act (IN A), S U.S.C. Jj 1202(0. concerning the disclosure of 
visa records in litigation. 

Privacy Act Compliance . In carrying out this MOU, eaeli Party is 
responsible for its own compliance with the Privacy Acl of l')74. 5 
U.S.C. ijvj 552a f/ scq.. in the collection, maintenance, use. and 
dis.scmination of personally idenlillable information. Within .^0 calendar 
days after the effective date of this MOU, each Parly agrees to review ils 
applicable Privacy Act system of records notices and any rcle\ anl lorms 
used to collect information from the public where such information ma.N 
ultimaiely be used during ihe redress prt)cess. l-ach Parly agrees to make 
appropriate changes to those documents, il'neee.s.sary. including the 
publicalion of new ot modilled n)uline uses lo permit Ihe sharing ol 
information to resolve redress mailers and related litigation. 
Keeord Retention . l:acli Party agrees to retain its redress records for at 
least six years from the date *>f fmal agency disposition. .Agencies may 
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clccl ii> csiablish ;i Umilici rclciuion pa it'd to inccl >l:iliit«>r> . rc|iul;iUir\. or g 
opciJilitMial rei|iiirv.'incnls. B: 
V RcquQNls lor nisclt'smc dI I SDIi l):iui I nics-, jiiul until I SC ihc ^ 

Panics ol an alicrnalc procaliuv. each Parly ayrccs ilial ii uili conuici 
I SC"> Icual counsel il il rccci\cs a rcqiicsi li>r inrorination or rcconls (hal 
It knows would rc\cal an indi\idna!"s status (positive or neuativc) in tiic 
rSDl) or would oilicr\sise lexeal the contents til' I SDB data. iSC Icual 
counsel will provide tiniel> tiuidance on how to respond to ilicse requests. 
Tills provisitm also pertains requests I'or i'SDR data resident in 
supported screening systems, such as the No-l ly l ist. 11 C 'S/ IBIS, the 
National Cfiine Inrorniatitm ( enter s Violent liang and Tenorisl 
< )rt>ani/ation I'ile ( V(i lOl ). ami the l)()S"s C onsular Lookout and 
SupjMMt Sy.steni (C I. ASS). 

I ^ • Kesp onsihilities ol'Sereenine Auencies : 

i- I ) esi'j!iialio n ol' Kes po nsihi lities . .\n\ Party thai is a scieeiiini; ayencv may 
*lesit!nale ani>lher Parly. \Mth the other Partv '> consent 1 1' needed. t*> 
perlorin the responsibilities outlined in section 4.H. olThis NK )L . In 
addition, where a .screenini! ayeney is a component i>l a Parly, the Part\ 
nia> deiennine at its discretion that any respt»nMbilit> olTliai screeninj: 
av;cnc\ nia\ be perrornied in whole or in pan b\ the Part>. 

ii RcMiurccs . Subject to the a\adabdil\ ol Tunds. each screeiuni! ayenc) 
u ill desiunale or create an oHlee to carry out its oiieralional 
icsponsibilities t\>r redicss. Wheie a Pan> lias several components lhat 
perroi in terrorism screening:, the responsible t>ri*icial lor that Patty (.wi 
Section 4..\.i above) will determine whether a single cenlrali/ed otHce or 
separate olTiccs in the appropriate componenls. or some combinalion ol 
the two. w ill perform this limclion. Subject to the av ailabilily ol" lunds. 
each screeiiiiiij auency w ill coiinuit sullleient and appropriate stalTand 
restnirccs lo that olUce or ol Tices to ensure redress complaints arc 
processed in a timely and erUcienl manner. The screeiiiny aiicneies aiiiee 
to notilV the other Parties of the identity ol and coniacl infoniiation lor the 
desiunated olllces under this paragraph no later than M) calendar davs 
alter this MOU becomes eH'ccli\e and update that inlormation as needed. 

iii Receipt and Initial Processing; ol C t)mi>laiiils . |-ach screenini; agencv will 
have a procedure lor reeeiv ini: complaints from members olThe public. IT 
the screeninu auencv receives n cvimplaini IVvMii an mdiv idual who appears 
to be in the TSDIi and the complaint relates to an advcisc elTeet m the 
seieeninu process arism;.' out ol his her placement in ilie 1 SDB, the 
aijencv will forward a c»ipv olThe cimiplaint aiul related inloniiation to 
rS( vvitliin a reas*iiuible lime. The .screeniim auencv will be responsible 
lor vcril v inu the idenlilv of the complainant in accordance vvith the 
.■>creenini: auencv s applicable regidations and policies. \\ hen rorvvaidiiii; 
a eoinptainl to TSf, the screenini; auencv must prov ide; ( I ) all releviinl 
correspondence from ihe individual. |2| ci>pies ol anv relevant internal 
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ngciicy iccoiils. and (3) inrornmlion iik'nlifyiim ihe coiiiplainiiiit incliitliHt!. ^ 
M i\ niinimuni. ilic complainant's lull name, date of hirih, and place of 
citizenship. Al'lor consultation willi alTectetl Parlies, I SC' may revi.se 
these requirements in the rulitre as needed lor expeditious processing of 
redress complaints. No amendment to lite MOl I would he ret|iiired to 
efrecluaie such a change. 

iv. l'ollo\v-up with the C\implainant . H reiiucsted by TSC, Ihe scrceninu 

agency will contact the complainant to request additional inlbrmalion lo 
assist "I SC' or the nominaling/originating agency in vori tying the 
complainant's identity and processing the complaint. Nothing in this 
subsection precludes a .screening agency from contacting the complainaiii 
ill accordance with llic screening agency's procedures or di.scrclion, 

V. Response lo the Complainant . Screening agencies are responsible lor 
pro\ iding a wriilen response lo complaints they recei\ e based on 
inlormatioii provided by TSC and the nominating/originating agency. 
Heeause ol the sensilivily ol'lhe I SDH and derogatory inlbrmalion. lite 
content ofany resp»>nse \o a complaini niusi be coordinated willi ISC' and 
the nominating/originaling agency ihroiigh I SC'. Screening agencies may 
use standardized response letters that have been eiuirdinaied in advance by 
the screening agency. LSC, and D{).l. 

vi. Redress lor MisidentiHed Persons . On .laiuiary I 7. 2()(K). 1)1 IS and DOS 
announced an initiative on "Secure BtMxiers and C)pen Doors in liie 
Inrormation .Age." otherwise known as (lie Ricc-C'hei tolT lniliali\ e. which 
includes the eslablishmeni ol'a redress process to address pcreoived 
problems in inlcrnalional ami domeslic traveler screening. The Dl IS 
Screening C oordination Ot'iice is leading Ihe inter-agency elTort to riilfill 
the goals ol'lhc Rieo-C'herlori' Initiative, which is intended lo improve ihc 
redress process for persons who are niisidenlilled during traveler 
screening processes, among other improvements 

vii. .Ad ministrative .Anneals . Iflhe screening agency has established an 
adminislrali\ e appeals process for redress determinalions or oilier agency 
delerminalions in which the TSDR was used, ihc .screening agency \\ ill 
noliiy TSC alter receiving any such administrative appeal and work uiih 
TSC. as needeil. lo process lite appeal, and coordinate the final agency 
response with I SC. I he screening agency will pro\ ide all lelcvani 
paperwork lo ISC (including a copy of ihe appeal letter and any 
information submitted by the indiviilual on their own beitall). When the 
screening agency has the legal authority lo make the fmal decision on ihc 
appeal, it w ill pnimplly luuiiy TSC ol that decision. 

viii. Lit igation. When Ihe screening agency beci>mes aware of liligalion arising 
oui of lerrorism screening, the .screening agency will notify I SC and DU.I 
as soon as possible after identifying the nexus lo the fSDH. Nolilleaiion 
should occur as soon as the Party learns of an individual's intent lo sue or 
immeilialely al'ter being served w iih legal prtKcss. 
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Kcsp(in>ihililics t'l llif "I ci i oi i^l Sltcciiiiv-! (. ciu cr : 

i. Rcccipi ;inJ C nor(.linalit>u of C omp^:lilH^ ■ I SC will rci.vi\i: coinplainls 
iVoiD scivoiiinu ;i!iOiicics ;iiul ix-si-'arch ihcm lo dclirmiiiii; the ii.iliirc ami 
cause ul lliu indiv idiiar.s adverse c.\pcricncc. I SC' will Hack all 
complaints and will be responsible lor I'aeililaling any iiUer-ayeney 
coordination necessary to properly research the complaint anil respond to 
the screening auency regardinu the milconie (e.g.. any coneetitins made or 
reci>mmended). 

ii. Uev iew ol Masis ior lnclu.>ion in the I SDL^ . In eases w here the 
complainanl is or appears lo he in ihe TSDK. TSC vvill pro\ ide copies ol" 
(he conipianit leller and other relc\ani inlornuilion lo \l I (. and or the 
nonnnaling originatmg agency to assist m the resolnlion oi tlie complanil. 

I Sf will then work with NC I C ami or the nominating originating 
agenc). as appropriate, lo determine whciiier liie complaiiiani s current 
slatus in ihe TSDB is appropriate hased on the most ciirrenl. accnrate. and 
lliorougli inlormaliiin available. I SC may ask NC" I C aiulor the 
noniinatiiig/originaiiiig agency lo pro\ ide updated inlormalion or analysis 
lo assist in this deterniinalion as well as lor a recominendalion on 
addressing the complaint. 

'i' Dele rininaiioii . .Mler ie\ iewing the available inrornuition and considering 
an> recommeiuialion liom ihe nomin.iling originating ageiicv. i Sf will 
make a deierminalion whether the record slu)ii!d remam m liie I SDH. 
have ils TSDB stains luodilied. or be removed, mile.ss the legal aulhoiii> 
lo make such a determination resides, in wliole or in pari, with aiiiiiher 
.igeiicv . In such cases. I SC" will i>nl\ pre|iaie a recommendation lor the 
decision-making agency and will implement an> deterniinalion once 
made. I SC will lake an> neces.sary aelion lo implement ilie deierminalion. 
such as removing the record Irom the I SDH or modilying the iec»>id"s 
slaliis in ihe I SDH (e.g.. ilovvngrade from \o-l ly lo Selei tee) Helore 
taking aelion that is inconsi.slenl with a recommendation ol ilic 
nomiiialiiig/originatiiig agency. I SC' will notily NC Tt . whieli will convey 
thai deierminalion back to ihe nominaling originating ageiicx. unless the 
nominaiiiig originating agency is the I- HI. in which case I SC will contact 
the I- HI direelK. Ihe nominating origmaiing agency will ihen be 
responsible lor addressing ihe conllici wiih I SC or ihe ileeision-making 
agciicv cither direcilx oriiirough XC iC . The Panics will ihcn coi»idinale 
on an agrced-lo resolulion. 

iv I pdate ol the t SDi^ . I SC w ill ensure lhat i SDH records are 

apjiioprialelv deleted or modified in accordance wiih a determination on a 
redress matter. TSl will al.so verily thai siich removals or moilillcalions 
carry over lo oilier screening sysloiiiN that receive I SDH ilaia (e.g., 
n .CS/IHIS. No-l-ly l.isi). 

V. Deetmnieiion . In the event ofa miilli-ageiicy nomination where the 
iu>m mating aiid^or originating agencies do not agree on what 
recominendalion should be made on a specille redress matter. I SC" will 



ici|iicsi iliai Ihc agencies consiili with one another and sliarc appropriate 
inlbrnKilion aboiil tiic watchlisted iiKii\ iilual in an attempt to provide a 
joint reconiniendalion to TSC. 1 1" the nominatinu'oriyinaling aucncies 
cannot agree to a joint recommendation. PSC (or other agency wiiii the 
legal authority to make the decision) will make the final determination 
considering the inrormation provided by each agency. 

vi. Review Related to Misidentilled I'cisons . H a complainant's ad\erse 
experience or (nileome during terrorism screening is a result ol lieing a 
near mnich ("misidenti(led") to a record in the r.SDIi, and that complaint 
is relerred to 1"S(.' hy the .screening agency, I SC" will review the record in 
the rSDU. as described in the paragraphs above, to ensure the I SDM 
record is valid and satisfies the criteria lor inclusion in the I Snii ami 
dcierminc il" additional information can be added to TIDI;. the TSDB, or 
other agency systems to reduce the likelihood of a fmure misidentificalioii. 

li the record does not meet the criteria, il w ill be removed Irom the 
ISDIi. 

vii. A din i n ist ra t i \ e Ai>nea Is . fSC will work with a screening agency to assist 
it in pmcessing any administrative appeal of a leilress determination or 
other determination in which the TSDB was used. When I SC' receives 
nolico of an appeal, ISC" will notify NCTC and/or the 
nominating/originating agency as sot>n as pi^ssible. TSC v\ ill facilitate 
cominunicalions between the nominating/originating and .screening 
agencies on (he following issues: ( I ) determining what material may be 
rclcasable to the individual during appeal (if applicable), and (2) updating 
the analysis ol'any information that may have developed since liie original 
determination and/or any inlormation that was prt>vided by (he individual 
on his or her behalf during the appeals process itsell'. After reviewing the 
available information and considering any recommendation (lom the 
nominating/originating agency. I SC will make a determination whether 
the record shoiikl remain in the TSDf^. have Us TSDB status modified, or 
be removed, unless the legal authority to make such a delerminalion 
resides, in wlu>le or in part, with another agency. In such cases, I SC w ill 
o\\\\ prepare a recommendation lor the decision-making agency and will 
implement any determinali(»n «ince made. 

viii. Liliuation . When I SC becomes aw are of litigation arising i>ul of terrorism 
screening. fSC will notify NC fC. the nominaling/originaling agency, and 
DO.I as noon as possible. 



Responsibilities of the National Countcrtei rorism Center : 

i. 'l!\liCi\:.-C-'">'l':'l'P='''«'" T ""^1 Research orCom i^lainls. Upon receipt i^f a 
complaint from TSC, NCTC will review its holdings, notify the 
nominaiing/oi iginating agency of the complaint, and provide the 
n<»minating/originaling agency with a copy of the complaint for review. 
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III. 



IV 



NC" I'C will ihcii reiiiicsl lh;il liic noiniiuilinu''t>i iiiiii;uiiig agency and. a.s 
appioprialc, any other agency with rclcvanl inlonnalion, icview liicir ^ 
liolilings anil pioviilc NC TC inlbrnuilinn alcvaiil to ihc cuiiiplainl. I ins ^ 
may incliiiio iipilalod inlunnalion or analysis regarding ihe coinplainanrs 
ciinenl status in the I SDB. derogatory inrormalion. iilentil'ying 
inrormation that might he rclc\aiU to a misidenliricatii>n, or other 
pi>lcnlially relevant inlormation or analysis ( including that whicii lends to 
show that the individual is not a known or suspected terrorist, or which 
otherwise tends lo cast douhl on the derogatory inlormation). NC I t. will 
also rcc|uesl lhat the nominating/originating agency provide its 
recommendation regarding resolution ol' the complaini. W ilh tiic 
concurrence of the nominating/originating agency, NC TC w ill provide 
that agency's recommendation and any other relevant information lo TSt'. 
Should TSC or another agency disagree wilh the recoinmeiulalion. NCTC 
will assist in the deconlliclion process as set forth above. NC fC generally 
w ill not receive or process complaints or appeals lor indi\ iduals 
nominated only by the FBI. 

Review Rela t ed to Misidentil'ied Persons . If a complainant's adverse 
experience or outcome during terrorism screening w as the result of being a 
near match cmisidenliried"") to a record in the I SDB. and lhat complaint 
is referred to fSC by the screening agency. NCTC w ill work with TSC 
and the nominaling/originatinu agency to ensure the I SDB record is valid 
and .salislie.s ihe criteria lor inclusion in the TSDB. and determiiK if 
additional information can be added to TIDE, ihc TSDB, or other agency 
.systems lo reduce the likelihood of a future misidcnlillcation. 
U pdate of TIDI- . NC'fC will promptly update TIDE records wilh any new 
derogatory oroiher relevant informaliiin ( including that which tends to 
show^ that the individual is not a known or suspected terrorist, or w^hich 
ttlherwise lends to cast doubl on the derogatory information) pertaining lo 
individuals in the TSDB. NCTC will also modify TIDE in a limely 
fashion lo rellecl modificalions lo I SDB nominations resulting iVom a 
redress complaini and will make appropriate changes lo a given 1 IDf. 
record when il is necessary to irigger eleetroiiically conforming changes to 
the TSDB record. 

.Administrative A ppeals . NC I'C will work with I SC. as needed, to assist 
il in processinu any administrative appeal of a redress iletermination or 
other determination in which the TSDB was used, inehidiiig coordinaling 
commiiniealion between I SC. Ihe screening agency, and the relevant 
nominating/originating agency, as necessary. NC I"C"s primary role will 
be to coordinate admini.sliative appeal lequesls by TSC with the 
appropriate nominating/originating agency in the Inlelligence Connnunity 
other than the EBI. 
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|„ Kcsponsihiliiics Nomiiuuiii-J ( )iii;ina(in!J A iicncics: 

i" Rc\ icw. C >HirdinalitMK ami Rosoaieli ol\ i>i npMm>. < )ikc h.m i lied » > 1 a 
roilrcss complaint by I SC' i^r NC K . Ilic iiominaiiiiii ori'jinalinL' auciic\ 
w ill ic\ic\\ ihc ilcrouaidiA inrornialidn lhal is ihc basis lor iiicliulmu (he 
complainant in the rSDH. In cooulinatinn with NC 1 C. wiicn appcopiiatc, 
Ihc noniinalinji/oi iuinaling aucncy will evaluate whethci ihc complainant 
continncs to salisly the ciilcria lor inclusion in the I SDl?. as well as any 
olhci lelcvanl ci ilcria. such as those lor the No-l ly ami Sclcclcc l ists 1 he 
iiominalinL; oriiiinatinu aycncy w ill deleiinine whether iipilaleil 
inlonnaii««i or anaKsis exists, incliuliim information Irom »'ther auencies. 
and incorporaic an\ such inlorniation in its response. I he 
nominating oriuinalinii a!^enc> will also consider ain mtormalion 
provided through the redress process In ihe indi\ idual. ihc scrccninii 
aiiciiCN. NC K . or I SC I hc nonnn;ilii\L; oiiiiinatiiv-i aiicncv sh;ill take 
appi»>P'K»'-" ^I'-T"^ nuK\\i\ . coiTccl. ordelclc its holdings to rcllcet an> 
changes made to I IDI- as a lesuli ol the redress process, or that oihcrw isc 
have been delermined to be in error as a result (^I'lhe redress process, 
ii. Uecomincn dalion . I he iiominaiiny/originatinL: agency may make a 

recoinmendalion to I SC as to the resokilion ol any coinpiaiiil. ( ontinued 
inclusion in ibe I SDM must be supporicd by derouaioiy inlorniation in 
l IDi:. When the lumiinaliiiL' originalinu agencv has additional derouaiorv 
or other relevant inlorinaiion that is not in I ll)l-. the 
noniinalinu oriuinaiinii aiienev will ensure thai N(- I t and I St are 
iM.lilied. ami vv"ill work with NC I t and I SC to ensure thai Mich 
intonnalion is added to I ini: in a manner that prov ides meamnglul 
inrormaiu)n while pii.tecting sources and methods, l-verv ciroit shouUI be 
made, however, to share ihe derouaiorv information with I SC whenever 



III. 



IV. 



Deco n Miction . In Ihe event of a mulli-auency nomination where the 
nominating and/or oriuinatinu agencies do not agree on what 
recoinmendalion shouUI be made on a specillc redress matter, the agencies 
will consult with one another al I SC 's request and share appiopruilc 
Milormation about the walchli.sted mdividual m an ailempt lo provide a 
loini recoinmendalion lo T.SC-. II ihc nominaling originating agencies 
cannot agree to a joint reci»nuncndation. I St will make the Imal 
delerminalion considering all of ibc available information. 

lew Related to Mis iilcn lil'iod I'cisons . If a c«MiiplaiiuiiHs adverse 
CNpcrience durin- terrorism screening was the result of being :•. neai match 
(••misidemi|-|ed"Mo a record in the t SDB. the nominaling oi igmaiing 
as:cncv of that iccrd will work with ISC and NCTC. as appropnaie. to 
ensure Ihe I SPii lecoul is valid and salislies the erileria lor inclusion m 
iheTSDM.and if additional information can be added l<» IIDI .the ISDH. 
or other agency systems lo reduce the likelihood of a iuliiie 
misidenlilicalioii. 
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V. Aclininisiiaiivc AniK-als . luicli iiuminaung/originaling agency will work 
w ilh rSC and NC TC. as nccJcil, lo assist Ihcm in proccssinu an appeal of 
a roclivss tictcrminalion or other determination in which tiic TSI )B was oo 
used. The nominatinu/oriuinating agency will be responsible lor advisinu 
the screening agency on the releasabilily ol any materials rctiiiested by an 
appellant during an appeal. An updated analysis ol'all relevant 
information will he coordinated between N(.' I'C and the 
nominaiing'originaling agency, and will be forwarded lo I SC. which in 
lurn will pa>\ ide ii lo die screening agency, fhe analysis will consider 
any now inlbnnalion developed since the initial delerniinatiou. as well aN 
any information provided by the individual on his or her own behalf 
during ihe appeals process itself. 

1- . Ijji-iiionsihilities of the I )enarln ienLoLhMk^'- 

i. no.l will coordinate with the relevant Parties during the defen.sc ol any 
judicial challenge t<i the resolution of a complaint processed under this 
MOU t)r a determination by a .screening agency that relied in w hole or in 
pml on records or information in the fSDH. 

ii. DO.I will consul! w ith the Parlies, as neces.sary. lo provide continuing 
legal advice and support on matters related lo watchlisting redress and this 
MOi:. 

(i. Visii Anolicaiion Process: DO.S and PI I S Resnonsibililies at the l ime of Visa 
Relksal : 

i. DOS and 1)1 IS w ill continue lo comply with applicable visa procedures, 
which may include an al-post internal review by a supervisory consular 
officer or another appropriate ofllcial. While a consular ofiicer's denial of 
a visa application may not be overruled, that determination is informed by 
an internal management review and. in appropriate ca.se.s. l->y mpul Irom an 
interagency review. 

ii. 1 fa visa application is refused, applicants are advised lhat they may re- 
apply for a \ isa. A subsequent application is consiilered as a ne\v case. 
DOS agrees lo conliiuic lo review the underlying data and facts in such 
subsequenl iipplicatii>ns. Whenever appropriate, DOS consults with I SC. 
NCTC. and other agencies regarding data ihai appears incomplete or 
inaccurate, or othcnvisc conliicts with infointation obtained in (he visa 
application process. 

5. si:-m.i:Mi:Nr()i pisinni-s 

I Ncepi as set forih in paragraphs 4.C.V and 4.F..iii concerning the deconlliclion of watehlisi 
nominations, disagreements between the Parties arising under or related lo this MOl will be 
resolved only by consultation between the Parlies. 
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rilis NK )l i> nol inlciulcil u> Lcnllict wilh cilhci llie Consliuilinn or cuiTciil Iciioiiil ^l:llull.•s. 
regiilaiioMs, or liic clircclivcs iil lhc Parties. Il'any icrin or pnnision ol iliis M( )l ' is inctwisisicni 
wilh siioii aiilhorily, llicn ihc Icrin or provision sliail Ik- inappliLahlc (o iliai I'ariy and any oilier 
Parly thai is ilcpciuiciil upon llic firsl Parly's action to poriorni ils responsibilities, hut the 
reinainiiii; terms aiul eonJitions ol this MOl ' shall eoniiinie lit apply. 

^- AMI NDMliN I 

I his M< )l ma\ be ameiulevl at an\ lime b\ the mutual written eonseni nl the i'arties' authori/eJ 
represenlati\es. MoJitleation unhm the seope ol this MOl shall be made b\ the issiianceitl a 
riill*. exeeuleil addendum prior to an\ ehansies in responsibilities bemsi pertornteii. 

S. ll-KMINAIiON 

The terms ofthis M( )U. as it may be amended, will remain in elTeci indeiinilelv . To terminate 
ils participation in this MOl', a Parly miisl yive at least M) days prior uriiien inMiee. In the e\enl 
ol terminalion. each Parts will continue with lull pariicipation up to the elTeclixe date ot 
lenninalion. 

»>. XOOHLIGATION or I I NDS 

This \l( )l does no! ci>nsiitiite an obligation to expend liinds b\ an\ Pan\ . I niess oihei^x ise 
agreed in writinsi. each Parts shall bear ain costs it incurs in relation to this \I( )l . 1 \peiKlitiires 
will be subject to lederal biuiuetary processes and a\ailabilit> ol Tunds pursuant to applicable 
laws and reyiilations. I he l^irlies expressly aeknowledye that this M( )L' in no way implies thai 
C ongress w ill appropriate lunds \'or such e.\peiuli Hires. 

10. NO PKIV.A TI-: RKiin S 

This Mor is an internal ariantjement belwceii the Parties and is noi intended, and should nol be 
construed, lo create an\ riuht or beneiii. subsianii\e or procedural, enlorceable at law or 
othensise in an\ third parts against the Parlies, their parent or component agencies, ihe I niicil 
.•states, or the olTicers. emplovees. agents «»r titlier associated personnel thereol. 

I 1 , I I I lA TIM. D.M I 

The terms oliliis MOl w ill become elTeclise on the dale on which it is signed In all P;iiiies 
The M< )l mas be signed in counterparts. 

12. pi: kioi)1c RHVI IAV 

Ihe Responsible OlTicials designated by the P;iilies puisuaiu lo sectii>ii 4..\,i will meei on an 
annual basis oral the rei|uesi olans Paris lo discuss and review the implementation olthis 
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MOU. 1 ailiiic ol lhc parlies lo cuiuliict amuial reviews will iiol rcsiill in llio icnnination of 
activities prt)vided lor under this MOU. 

l.V I'OIN I S Ol- CONTACT 

Points oreoniaei (POC's) for the Parties, identiricd below, are responsible fur idcntifyini! the 
responsible olfieials and redress resources pursuant to sections 4.A.i and ii. and 4.B.ii and 
pro\ idinu that inlornialion lo liie other POC's. 

A. The POC for the Deparinient ol Miisliee will be the C hiei" Privacy and Civil 
Liberties Oflleer. 

B. I he P( )C lor the l-ederal Bureau of Investigation will be the Section Chiel orHie 
National I hreal Center Section. Counterterrorism Division. 

C I he P( )C lor the Terrorisl Screeninii Center will be the Privacy OlTicer. 
I). The POC lor the National C ounterterrorisni C enter will be the Chierortlie 
Terrorisl Identities Oroup. 

I. . The POC for the Deparlinenl ofl lonieland Security w ill be the Director ol lhc 

Screening Coordinaliiin OlUcc. 
I-. The PCX'^lor the Deparlmenl ol'Slale will be the Director of Inlorniation 

Manauenient and Liaison StalT. Visa Olfice. 
Ci. I he POC lor the Oll'ice oflhe lOirector ofKational Inleliigence will be the Civil 

Liberties Protection ( )lTicer. 

I I. The POC lor the Central liitelliuencc Agency will be the I hicftif Policy and 
Coninuinity Action StalTtPCAS). 

I. The P( )C lor the Department of Dereiise will be the Director, .k>int Intelligence 
lask l oree lor Combating l errorisni. Deleiise Intelligence Agency. 

.1. I hc POC lor the Department ol tlie I rcasury will be the Assistant Cieneral 
Counsel (linroreemenl and Inlelligcnce). 
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The foregoing represents ihc untlcrsianding reached by the Panics. 
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Director, Federal bureau of Investigalion 
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Director, National Countcrterrorisn\ Center 
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Director, Centrai Intelligence Agency 
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The foregoing represents the understanding reached by the Parties. 
APPROVED BY: 



Condolcczza Rice 
Secretary of State 
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Secretary of the Treasury 



Alberto R. Gonzales 
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Secretary of Defense 
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Oirocior of National Intelligence 




Date 
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John I). Negroponie 
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The foregoing represents the understanding reached by the Parties. 
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January 7. 2010 



MliMORANDl'M FOR THR S[:CRETARV Ol- STATH 

TH}-; SKCRETARY OF DEFENSF. 

THE A rrORNEY CiliNER.^L 

THE SECRETARY ENF:RGY 

niE SECRETARY OF HOMELAND SECURITY 

THE DIRECTOR OF NATIONAL INTELLIGENCE 

THE DIRECTOR OF H IE CENTRAL INTELLiCiENCE AGENCY 

THF. DIRECTOR OF l ilE FEDERAL IH REAC OF 

INVESTIGATK )N 
THE l)IRECT(Mt OF FHE NATIONAL SECURI I Y AGENCY 
THE DIRECTOR OF 11 IE NA FIONA!. COLINTi-R rERRORISM 
CENTER 

SL'WECT- .Atlempied 1 crrorist .\tlack on December 25. 200Q: Inielligencc. 

Screeninu. and Watchii.sting Sy.siem Corrective Actions 

.'\lier receiving the concliision.s of the White House-led review of the I '.S. wntchlisting system 
and the pcrlbrmaiice of the intelligence, homeland security, and law enforcement communities as 
related to the attempt to bring down a Detroit-bound flight on December 25 by detonating an 
explosive device, and a Department of Homeland Security-led review on .Aviation Screening. 
Techni^logy and Procedures; I have concluded diat immediate actions mu.st be taken to enhance 
the security of the American people. These actions are necessary given inherent systemic 
weaknesses and human errors revealed by the review of events leading up to December 25"'. 
ITiey also arc required lo ensure that the standards, practices, and business processes that have 
been in place since the aftennalh of 9/] 1 art: appropriately robust to address the evohing terrorist 
threat facing our Nation in the coming years. 

Dcpurtmcnt of State 

• Review visa issuance and revocation criteria and proces.ses. with special emphasis on 
counterterrorism concerns: determine how technology enhancements can facilitate and 
strengthen visa-related business proce.s.ses. 

Department of Homeland Sccuritj' 

• .Aggressively pursue enhanced screening technology, protocols, and procedures. 
especiallN in regard to aviation and other transportation sectors, consistent with privacy 



rights and civil liberties; strengthen iniemntional partnerships and coordination on 
aviation security issues. 

• Develop recommendations on long-tenn law enforcement requirements for aviation 
security in coordination with the Department of Justice. 

Director of National Intelligence 

• Immediately rcafllmi and clarily roles ;ind responsibilities of the counierterrorism 
analytic components of the Intelligence Community in synchronizing, correlating, and 
analyzing all sources ol intelligence related to terrorism. 

• .Accelerate information technology enhiincements. to include knowledge discovery, 
database integration, cross-database searches, and the ability to correlate biographic 
information with terrorism-related intelligence. 

• l ake further steps to cnhajice the rigor and raise the standard of tradecraft of intelligence 
analysis, especially analysis designed to uncover and prevent terrorist plots. 

• Knsuro resources are properly aligned with issues highlighted in strategic warning 
analysis. 

The Central Intelligence Agency 

• Lssuc guidance aimed at en.suring the timely distribution of intelligence reports 

• Strengthen procedures related to how watchlisting information is entered, reviewed, 
searched. anal\/ed. and acted upon. 

Federal Bureau of Invcstigation/Tcrrori.st Screening Center 

• Conduct a thorough review of Terrorist Screening Databa.se holdings and ascertain 
current visa status of all ■■kno\vn and suspected terrorists." beginning with the No Fly list. 

• Develop recommendations on whether adjustments are needed to the watchlisting 
Non)inations Guidance, including biographic and derogatory criteria for inclu.sion in the 
ferrorist Identities Datamart Environment and lenorisl Screening Database, as well as 
the subset Selectee and No Fly lists. 



National Counterterrorism Center 

• Establish and resource appropriately a process to prioritize and to pursue thoroughly and 
exhaustively terrorism threat threads, to include the identification of appropriate follow- 
up action by the intelligence, law enforcement, and homeland .security communities. 



> 

• Establish a dedicated capability responsible for enhancing record information on possible ^ 
terrorists in the Ferrorist Identities Dataniart L'nvironinent for watchlisling purp^>ses. 

National Sccurjt>- Agency 

• Develop and begin implementation ol a training course to enhance analysts' awareness of 
watchlisting processes .ind procedures in partnership with National Countcrterrorisin 
Terrorist Center and the Terrorist Screening Center. 

National Securit>' Staff 

• Initiate an interagency policy process to review the systemic failures leading to the 
attempted terror attack on December 25. 2009, in order to make needed polic>- 
adjustments and to clarify roles and responsibilities witlun the counlerterrorisni 
eommunit\ . 

• Initiate an interagency review of the watchlisting process, including business processes, 
procedures, arid criteria for watchlisting, and the interoperability and sufllciency of 
supporting information technology systems. 

I have designated my .Assistant for Homeland .Security and Counterterrorism John Brennan to be 
the responsible and acc<nintablc White House official to ensure rapid progress is made in all 
areas. .A monthly status report on actions underway should be submitted to me through Mr. 
Brennan. In addition, I am directing iVlr. Brennan to work with departments ;uid agencies and 
the Office of Management and Budget on resource requirements that are necessary to address the 
shortcomings uncovered by our review . I'inally. I will ask my Intelligence .Advisorv Board to 
look at broader analytic and intelligence issues a.ssocialed w ith this incident, including how to 
meet the challenge associated w ith exploiting the ever-increasing vtilume of infonnaiion 
available to the Intelligence Commiuiity. As we go forward, it is imperative that we work 
together to correct problems highlighted by this incident, focusing on concrete solutions. We arc 
all responsible lor the safety and security of the American people and must redouble our efforts 
to be effective in carrying out this solemn responsibility,. 
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Acronym 


Description 


Addendum B 


Addendum B to the Memorandum of Understanding on the Integration 
and Use of Screening Information to Protect Against Terrorism, Signed 
by The Secretary of State, the Secretary of the Treasury, the Secretary 
of Defense, the Attorney General, the Secretary of 1 lomcland Security, 
the Director of National Intelligence, the Director of the Central 
Intelligence Agency, the Director of the National Counterterrorism 
Center, the Director of the Terrorist Screening Center 


A-File 


Alien Registration File (DHS) 


AIS 


Automated Identillcation System 


ALA 


Airport Liaison Agents and Attaches (FBI) 


API 


Advanced Passenger Information 


ATM 


Automated Teller Machine 


ATS 


Automated Targeting System (DHS) 


CUP 


U.S. Customs and Border Protection (DHS) 


CBRN 


Chemical, Biological, Radiological, or Nuclear 


CCD 


Consular Consolidated Database (DOS) 


CIA 


Central Intelligence Agency 


CJIS 


Criminal Justice Information Services Division (FBI) 


CLASS 


Consular Lookout And Support System (DOS) 


CTD 


Counterterrorism Division (FBI) 


DC 


Deputies Committee 


DC I 


Director of Central Intelligence (now the DNI) 


DHS 


Department of Homeland Security 


DIA 


Defense Intelligence Agency (DoD) 


DoD 


Department of Defense 


DOJ 


Department of Justice 


DOMEX 


Document and Media Exploitation 


DOS 


Department of State 


DSR 


Daily Summary Reports (TSC) 


DIO 


Designated Terrorist Organization 


EFPs 


Explosively Formed Projectiles/Penetrators 


EMA 


Encounter Management Application (TSC) 


ERO 


Enforcement and Removal Operations (DHS/ICE) 


ESEL 


Expanded Selectee List 


ESTA 


Electronic System for Travel Authorization 


FBI 


Federal Bureau of Investigation 


FIN 


Fingerprint Identification Number (DHS) 


EISA 


Foreign Intelligence Surveillance Act 


FGl 


Foreign Government Information 


FTO 


Foreign Terrorist Organization 


F'lTTF 


Foreign 1 errorist Tracking Task Force (FBI) 


HAZMAT 


Hazardous Materials 


HSPD-1 1 


Homeland Security Presidential Directive - 1 1, Comprehensive 
Terrorist-Related Screening Procedures 
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Acronym 


Description 


HSPD-24 


Homeland Security Presidential l)irective-24. Biometrics for 
Identification and Screening to Enhance National Security 


HSPD-6 


I lomeland Security Presidential Dircctive-6, Integration and Use of 
Screening Information to Protect Against Terrorism 


I«&A 


Office of Intelligence & Analysis (DHS) 


lAFIS 


Integrated Automatic Fingerprint Identification System (FBI/CJIS) 


lAP 


Immigration Advisory Program 


ICE 


U.S. Immigration and Customs Enforcement (DHS) 


lED 


Improvised Explosive Device 


IIR 


Intelligence Information Report 


I>JA 


Immigration and Nationality Act 


Information 
Sharing MOU 


Memorandum of Understanding between the Intelligence Community, 
Federal Law Enforcement Agencies, and the Department of Homeland 
Security Concerning Information Sharing, dated March 4, 2003 


IP 


Internet Protocol 


IPC 


Interagency Policy Committee (IPC) is an interagency group led by the 
White House National Security Staff to establish Administration 
policies 


IRTPA 


Intelligence Reform and Prevention Act 


ISA 


The Information Sharing and Access Interagency Policy Committee 
(ISA IPC) is the While House led group that specifically addresses 
watchlisting policies for the U.S. Government 


ISR 


Information Sharing Environment 


JTTF 


Joint Terrorist Task Force 


JWICS 


Joint Worldwide Intelligence Communications System 


KSTF 


Known or Suspected Terrorist File (Federal Bureau of Investigation, 
National Crime Information Center, formerly Violent Gang and 
Terrorist Organization File (yOTOf^) 


LEGAT 


Legal Attaches (FBI) 


LEO 


Law Enforcement Online 


LPR 


Lawful Permanent Resident 


MOU 


Memorandum of Understanding 


NCIC 


National Crime Information Center (FBI) 


NCTC 


National Counterterrorism Center 


NDIU 


Nominations and Data Integrity Unit ( TSC) 


NICS 


National Instant Criminal Background Check System 


NIPF 


National Intelligence Priorities Framework 


MIDI? /^T* 


National Intelligence Priorities Framework - Counterterrorism 


NIV 


Non-Immigrant Visa 


NMEC 


National Media Exploitation Center 


NORl'HCOM 


Northern Command (DoD) 


NTC-C 


National Targeting Center Cargo (DHS/CBP) 


NTC-P 


National Targeting Center - Passenger (DHS/CBP) 


NVMC 


National Vessel Movement Center (DHS) 
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Acronym 


Description 


OIA 


Office of Intelligence and Analysis (DHS/TSA) 


OTW 


One Time Waiver 


PIKRS 


Passport Information Electronic Records System 


PNR 


Passenger Name Records 


POH 


Port of Entry 


RDD 


Radioactive/Radiation Dispersal Device 


Redress MOU 


Memorandum of Understanding on Terrorist Watchlist Redress 
Procedures 


SDGT 


Specially Designated Global ferrorist 


SDT 


Specially Designated Terrorist 


SIPRNET 


Secret Internet Protocol Router Network 


SME 


Subject Matter Expert 


SDNL 


Specially Designated Nationals List 


SRQ 


Single Review Queue ( TSC) 


TACTICS 


Tipoff Australia Counterterrorism infomiation Control System 


TBU 


Threat-based expedited upgrade 


TECS 


No longer an acronym. Previously Treasury Enforcement 
Communications System. 


TIDE 


Terrorist Identities Datamart Environment 


TIPOFF 


Not an acronym. Also seen as Tipoff. 


TREX 


Terrorist Review and Examination Unit (TSC) 


IRIP 


Traveler Redress Inquiry Program (DHS) 


TSA 


Transportation Security Administration (DHS) 


TSC 


Terrorist Screening Center 


TSC MOU 


Memorandum of Understanding on the Integration and Use of 
Screening Information to Protect Against Terrorism 


rSDB 


Terrorist Screening Database 


TSOC 


Terrorist Screening Operations Center (formerly Terrorist Screening 
Tactical Operations Center (TS'TOQK'VSC) 


TSOU 


Terrorist Screening Operations Unit (TSC) 


rnc 


Terrorist Threat Integration Center (now NCTC) 


TUSCAN 


Tipoff United States Canada 


rwic 


Transportation Worker Identification Credential (DHS/TSA) 


U.S. 


United States 


U//FOUO 


Unclassified, for oHicial use only 


UNSCR 


United Nations Security Council Resolution 


URL 


Uniform Resource Locator 


USAID 


United States Agency for International Development 


USCG 


United States Coast Guard (DHS) 


USCIS 


U.S. Citizenship and Immigration Services (DHS) 


USSS 


United States Secret Service (DHS) 


VIN 


Vehicle Identification Number 


WLS 


Watchlist Service (DHS) 
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Summary of Changes and Updates from the 
2010 Watchlisting Guidance 

I::tsc.;S! 

'^*.*W*'fOUO) The Watchlisting Guidance is a comprehensive document detailing the U.S. 
Government's terrorist watchlisting policies and procedures. It was originally developed to help 
standardize the watchlisting community's nomination and screening processes. Since approval of 
the Watchlisting Guidance in July of 2010, the guidance and its related appendices have 
undergone a thorough interagency review as a result of a May 2010 Deputy's Committee tasking 
to the White House National Security Staff Information Sharing and Access Interagency Policy 
Committee (IPC) that any significant issues or required changes be brought back to the Deputies 
for discussion. The Information Sharing and Access IPC identified a number of changes in 
Department and Agency watchlisting practices that had evolved since dissemination of the 
guidance in 2010. In order to reflect these changes, the 2013 Watchlisting Guidance was 
developed over a period of several months by an IPC under the auspices of the Presidential Policy 
Directive -One (PPD 1) process with representatives from the Departments of State, Treasury, 
Defense, Justice and Homeland Security, the Office of the Director of National Intelligence, the 
Central Intelligence Agency, the National Security Agency, the Defense Intelligence Agency, the 
National Countcrterrorism Center, the Federal Bureau of Investigation, and the Terrorist 
Screening Center. The Deputies Committee adopted the recommendation of the IPC to approve 
the 2013 Watchlisting Guidance on March 12, 2013. 

(U//FOUO) The 2013 Watchlisting Guidance has a new structure and is organized in a way that 
mirrors the watchlisting cycle. It is now a single document divided as follows into fives chapters, 
with significant watchlisting foundational documents for reference, and a list of definitions, 
acronyms, and abbreviations: 

• Chapter I : Watchlisting Process and Procedures; 

• Chapter 2: Minimum Identifying Criteria; 

• Chapter 3: Minimum Substantive Derogatory Criteria; 

• Chapter 4: No Fly, Selectee and Expanded Selectee Lists Implementation Guidance; 

• Chapter 5: Encounter Management and Analysis; 
Appendix I : Definitions; 

• Appendix 2: Homeland Security Presidential Directive 6; 
Appendix 3: Memorandum of Understanding on the Integration and Use of Screening 
Information to Protect Against Terrorism (TSC MOU); 
Appendix 4: Addendum B to the TSC MOU; 
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WARNING: This record contains Sensitive Security Information that is controlled under 49 CFR parts 1 5 and 1 520. 
No part of this record may be disclosed to persons without a "need to know", as defined in 49 CFR parts 15 and 1520, 
except with the written permission of the Administrator of the Transportation Security Administration or the 
Secretary of Transportation. Unauthorized release may result in civil penalty or other action. For U.S. Government 
Agencies, public disclosure is governed by 5 U.S.C. 552 and 49 CFR parts 15 and 1520. 
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• Appendix 5: Memorandum of Understanding between the Intelligence Community, 
Federal Law Enforcement Agencies, and the Department of Homeland Security 
Concerning Information Sharing {Information Sharing MOU)\ 

• Appendix 6: Hxecutive Order 13388, Further Strengthening the Sharing of Terrorism 
Information to Protect Americans; 

• Appendix 7: Department of Justice Protocol on Terrorist Nominations; 

• Appendix 8: Memorandum of Understanding on Terrorist Redress Procedures {TSC 
Redress MOIJ); 

• Appendix 9: Presidential Memorandum Regarding 12/25/2009 Icrrorist Attack; 

• Appendix 10: Acronyms and Abbreviations; 

• Appendix 1 1 : Summary of Changes and Updates from the 2012 Watchlisting Guidance. 

(U//1-OUO) The 2013 Watchlisting Guidance includes the following substantive policy changes 
and updates: 

• New, amended, or clarified definitions are included for the terms "aggregator," 
"derogatory information," "encounter," "enhancement," "foreign fighters," "fragmentary 
information," "known terrorist," "lone wolf," "operationally capable," "particularized 
derogatory information," "reasonable suspicion," "terrorism screening information," 
"terrorism and/or terrorist activities," and "U.S. Person" (Appendix 1); 

• Nominators are instructed to send available information to the National Counterterrorism 
Center for consideration and additional review where reasonable minds could disagree on 
a record (Chapter 1); 

• Nominating Departments and Agencies are instructed to prioritize the identification of 
new Known or Suspected Terrorists who meet the reasonable suspicion standard, along 
with the identifying and derogatory information most useful to the watchlisting and 
screening effort (Chapter 1); 

• Nominating Agencies are to conduct periodic reviews of their nominations of U.S. 
Persons, at minimum on an annual basis (Chapter I); 

• Detailed instructions are described for handling U.S. Person information and ensuring that 
proper coordination processes are implemented (Chapters 1 and 3); 

• The guidance regarding minimum identifying criteria has been revamped and exceptions 
clarified (Chapter 2); 

• The guidance has been revised to provide Nominators with more flexibility regarding 
nominations of individuals based on fragmentary information (Chapter 2); 

• The minimum substantive derogatory criteria guidance has been restructured to elaborate 
on instances of where particularized derogatory information is required to meet the 
reasonable suspicion standard, and when reasonable suspicion is established by other 
authority (Chapter 3); 
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• The minimum substantive derogatory criteria has been restructured to enable the 
watchiisting community to more clearly distinguish between watchlisling based on 
substantive derogatory criteria that meets the reasonable suspicion standard from 
watchiisting for purposes that support immigration and visa screening activities of the 
Department of Homeland Security and the Department of State (Chapter 3); 

• Revised guidance is provided regarding the watchiisting of individuals based on 
information provided by a foreign government (Chapter 3); 

• The guidance contains two additional categories of alien non-terrorists in the databases 
maintained by the National Counterterrorism Center and the Terrorist Screening Center to 
support immigration and visa screening activities of the Department of Homeland Security 
and the Department of State (e.g., individuals who have a defined relationship with the 
Known or Suspected Terrorist, but whose involvement with the Known or Suspected 
Terrorist's activities is unknown (TIDE Category Code 50) and aliens for whom 
additional intelligence is required (TIDI' Category Code 99)) (Chapter 3); 

• The Implementing Guidelines regarding the No Fly and Selectee List criteria have been 
updated and clarified (e.g., Guantanamo Bay detainees are now included on the No Fly 
List, as required by 49 U.S.C. Section 44903(j)(2)(C)(v)) (Chapter 4); 

• Use of the One Time Waiver Policy is addressed to facilitate travel under controlled 
conditions of certain U.S. Citizen Known or Suspected Terrorists (Chapter 4); 

• The guidance reflects the creation of the Expanded Selectee List, an export to the 
Transportation Security Administration of Known and Suspected Terrorist records within 
the Terrorist Screening Database that contain a full name and complete date of birth to 
support airiine passenger screening (Chapter 4); and 

• The guidance reflects the authority of the Terrorist Screening Center Director to make 
individual watchlist determinations (i.e., placement on the No Fly, Selectee and Expanded 
Selectee I -isls) during exigent circumstances (Chapter 4). 

(U//FOUO) These changes to the Watchiisting Guidance arc intended to make the watchiisting 
process more flexible, agile, and inclusive in order to respond to additional terrorism threats while 
providing the watchiisting community detailed guidance concerning the watchiisting policy of the 
U.S. Government. 

(U//FOUO) The 2013 Watchiisting Guidance describes the U.S. Government's comprehensive 
watchiisting policies and process and includes Sensitive Security Information. Accordingly, 
Departments and Agencies who received copies of the 2013 Watchiisting Guidance arc instructed 
to carefully control and share the guidance with only those individuals who are directly involved 
in the terrorist watchiisting and screening process. 
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(U) >Jothing in the 2013 Watchlisting Guidance is intended to restrict the authority of any 
Department or Agency to act as provided by law, statute, or regulation, or to restrict any Agency 
from enforcing any laws within its authority or jurisdiction. 
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